CVE-2024-23366CWE-126

Buffer Over-read in Automotive Autonomy

Medium · published January 6, 2025

CVSS v3.1
6.6
EPSS
0%
Percentile
2.0
In the wild
Unconfirmed
What it is

Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00125 · 2.0th percentile
Weakness
CWE-126 · Buffer Over-read
Published
2025-01-06T10:33Z
EPSS history
Timeline
  • 06 JAN 10:33Z
    Buffer Over-read in Automotive Autonomy
    cvelistv5