Lucene search
HistoryMay 03, 2024 - 1:15 p.m.
CVE-2024-2410
cve-2024-2410
protocol buffers
c++
json parsing
stream vulnerability
CVSS3
7.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
EPSS
0
Percentile
9.0%
The JsonToBinaryStream() function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed.
Related
cve
cve
CVE-2024-2410
2024-05-03 13:15:21
cvelist
cvelist
CVE-2024-2410 Use after free in C++ protobuf
2024-05-03 12:58:39
ubuntucve
ubuntucve
CVE-2024-2410
2024-05-03 00:00:00
debiancve
debiancve
CVE-2024-2410
2024-05-03 13:15:21
redhatcve
redhatcve
CVE-2024-2410
2024-05-03 18:54:56
vulnrichment
vulnrichment
CVE-2024-2410 Use after free in C++ protobuf
2024-05-03 12:58:39
veracode
veracode
Use After Free
2024-05-08 06:04:01
CVSS3
7.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-2410