CVE-2024-2410CWE-416

Use after free in C++ protobuf

High · published May 3, 2024

CVSS v3.1
7.6
EPSS
0%
Percentile
25.1
In the wild
Unconfirmed
What it is

The JsonToBinaryStream() function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00332 · 25.1th percentile
Weakness
CWE-416 · Use After Free
Published
2024-05-03T12:58Z
EPSS history
Timeline
  • 03 MAY 12:58Z
    Use after free in C++ protobuf
    cvelistv5