We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-8067

Unicode "best fit" argument injection



Description

In versions of Helix Core prior to 2024.1 Patch 2 (2024.1/2655224) a Windows ANSI API Unicode "best fit" argument injection was identified.

Reserved 2024-08-21 | Published 2024-09-24 | Updated 2024-11-21 | Assigner Perforce


MEDIUM: 5.8CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N

Problem types

CWE-176: Improper Handling of Unicode Encoding

Product status

Default status
unaffected

2024.1
affected

References

portal.perforce.com/s/detail/a91PA000001SXEzYAO

cve.org (CVE-2024-8067)

nvd.nist.gov (CVE-2024-8067)

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-8067

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat
Subscribe to our newsletter to learn more about our work.