Lucene search
HistoryApr 17, 2024 - 8:15 p.m.
CVE-2024-0257
robodk v5.5.4
heap-based buffer overflow
specific project file
memory corruption
3.3 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
7.3 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
RoboDK v5.5.4
is vulnerable to heap-based buffer overflow while processing a specific project file. The resulting memory corruption may crash the application.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "RoboDK",
"vendor": "RoboDK",
"versions": [
{
"status": "affected",
"version": "v5.5.4"
}
]
}
]Related
nvd
nvd
CVE-2024-0257
2024-04-17 20:15:07
ics
ics
RoboDK RoboDK
2024-04-16 12:00:00
cvelist
cvelist
CVE-2024-0257 RoboDK Heap-based Buffer Overflow
2024-04-17 19:53:36
3.3 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
7.3 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Related for CVE-2024-0257