CVE-2024-24784

2024-03-0523:15:07

[email protected]

web.nvd.nist.gov

cve-2024-24784

parseaddresslist

comments

display names

trust decisions

address parsers

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.2%

JSON

The ParseAddressList function incorrectly handles comments (text within parentheses) within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions being made by programs using different parsers.