CVE-2024-45288CWE-170CWE-787
Multiple vulnerabilities in libnv
High · published September 5, 2024
What it is
A missing null-termination character in the last element of an nvlist array string can lead to writing outside the allocated buffer.
The record
Technical detail
- CVSS v3.1
- 8.4 · HIGH
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00302 · 21.8th percentile
- Weaknesses
- CWE-170 · Improper Null Termination; CWE-787 · Out-of-bounds Write
- Published
- 2024-09-05T03:18Z
EPSS history
Timeline