CVE-2024-22088

Lotos WebServer through 0.1.1 commit 3eb36cc has a use-after-free in bufferavail at buffer.h via a long URI, because realloc is mishandled...

CVE-2024-22088

CVE-2024-22088 affects Lotos WebServer up to version 0.1.1. The issue is a use-after-free in buffer_avail() in buffer.h triggered by handling a long URI, caused by mishandling of realloc. Documentation across multiple sources (NVD/Red Hat OSV/CNNVD/CVE records) confirms the same description, with...