CVE-2024-45287

Description

A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a smaller buffer than required for the parsed data.

Reserved 2024-08-26 | Published 2024-09-05 | Updated 2024-09-26 | Assigner freebsd

Problem types

CWE-131 Incorrect Calculation of Buffer Size

CWE-190 Integer Overflow or Wraparound

Product status

Default status
unknown

14.1-RELEASE before p4
affected

14.0-RELEASE before p10
affected

13.3-RELEASE before p6
affected

Credits

Synacktiv finder

Taylor R Campbell (NetBSD) finder

References

security.freebsd.org/advisories/FreeBSD-SA-24:09.libnv.asc vendor-advisory

cve.org (CVE-2024-45287)

nvd.nist.gov (CVE-2024-45287)

Download JSON