CVE-2025-3017CWE-119CWE-787

TA-Lib ta_regtest test_minmax.c setInputBuffer out-of-bounds write

Medium · published March 31, 2025

CVSS v4.0
4.8
EPSS
0%
Percentile
7.9
In the wild
Unconfirmed
What it is

A vulnerability, which was classified as critical, has been found in TA-Lib up to 0.6.4. This issue affects the function setInputBuffer of the file src/tools/ta_regtest/ta_test_func/test_minmax.c of the component ta_regtest. The manipulation leads to out-of-bounds write. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of the patch is 5879180e9070ec35d52948f2f57519713256a0f1. It is recommended to apply a patch to fix this issue.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00188 · 7.9th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-787 · Out-of-bounds Write
Published
2025-03-31T21:31Z
EPSS history
Timeline
  • 31 MAR 21:31Z
    TA-Lib ta_regtest test_minmax.c setInputBuffer out-of-bounds write
    cvelistv5