CVE-2024-41721CWE-125
bhyve(8) out-of-bounds read access via XHCI emulation
High · published September 20, 2024
What it is
An insufficient boundary validation in the USB code could lead to an out-of-bounds read on the heap, which could potentially lead to an arbitrary write and remote code execution.
The record
Technical detail
- CVSS v3.1
- 8.1 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00776 · 55.3th percentile
- Weakness
- CWE-125 · Out-of-bounds Read
- Published
- 2024-09-20T07:51Z
EPSS history
Timeline