CVE-2024-45287 | THREATINT

Assigner	freebsd
Reserved	2024-08-26
Published	2024-09-05
Updated	2024-09-26

Description

A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a smaller buffer than required for the parsed data.

Problem types

CWE-131 Incorrect Calculation of Buffer Size

CWE-190 Integer Overflow or Wraparound

Product status

Default status

unknown

14.1-RELEASE before p4

affected

14.0-RELEASE before p10

affected

13.3-RELEASE before p6

affected

Credits

Synacktiv 0x4006c02b40

Taylor R Campbell (NetBSD) 0x4006c02b50

References

https://security.freebsd.org/advisories/FreeBSD-SA-24:09.libnv.asc vendor-advisory

cve.org CVE-2024-45287

nvd.nist.gov CVE-2024-45287

Download JSON

https://cve.threatint.com

Subscribe to our newsletter to learn more about our work.