CVE-2024-12212CWE-125
Horner Automation Cscape Out-of-bounds Read
High · published December 13, 2024
What it is
The vulnerability occurs in the parsing of CSP files. The issues result
from the lack of proper validation of user-supplied data, which could
allow reading past the end of allocated data structures, resulting in
execution of arbitrary code.
The record
Technical detail
- CVSS v4.0
- 8.5 · HIGH
- Vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS
- 0.00204 · 9.8th percentile
- Weakness
- CWE-125 · Out-of-bounds Read
- Published
- 2024-12-13T00:50Z
EPSS history
Timeline