CVE-2024-52064CWE-120

Potential stack buffer write overflow in Connext applications while parsing malicious license file

Medium · published December 13, 2024

CVSS v4.0
6.9
EPSS
0%
Percentile
4.3
In the wild
Unconfirmed
What it is

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.This issue affects Connext Professional: from 7.0.0 before 7.3.0.2, from 6.1.0 before 6.1.2.21, from 6.0.0 before 6.0.1.40, from 5.0.0 before 5.3.1.45.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N
EPSS
0.00155 · 4.3th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2024-12-13T10:21Z
EPSS history
Timeline
  • 13 DEC 10:21Z
    Potential stack buffer write overflow in Connext applications while parsing malicious license file
    cvelistv5