CVE-2024-25003

2024-02-0900:00:00

mitre

www.cve.org

kitty

buffer overflow

vulnerability

hostname

arbitrary code execution

0.001 Low

EPSS

Percentile

20.9%

JSON

KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the hostname, occurs due to insufficient bounds checking and input sanitization. This allows an attacker to overwrite adjacent memory, which leads to arbitrary code execution.