CVE-2024-38517
Tencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer Underflow
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Tencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer Underflow
Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader.h` when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the integer underflow vulnerability (when the file is parsed), leading to elevation of privilege.
Reserved 2024-06-18 | Published 2024-07-09 | Updated 2024-09-05 | Assigner GitHub_MCWE-191: Integer Underflow (Wrap or Wraparound)
msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38517
github.com/...mmits/8269bc2bc289e9d343bae51cdf6d23ef0950e001
github.com/...ommit/8269bc2bc289e9d343bae51cdf6d23ef0950e001
Support options
