CVE-2024-52064CWE-120
Potential stack buffer write overflow in Connext applications while parsing malicious license file
Medium · published December 13, 2024
What it is
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.0.0 before 7.3.0.2, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0 before 5.3.1.45.
The record
Technical detail
- CVSS v4.0
- 6.9 · MEDIUM
- Vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N
- EPSS
- 0.00155 · 4.3th percentile
- Weakness
- CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
- Published
- 2024-12-13T10:21Z
EPSS history
Timeline