CVE-2024-45287 Multiple vulnerabilities in libnv

A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a smaller buffer than required for the parsed data...

CVE-2024-45287

The libnv library (also known as nvlist ) in FreeBSD systems is vulnerable to an integer overflow caused by incorrect buffer size calculations. A malicious value in a structure of packed libnv can lead to the allocation of a buffer smaller than required for the parsed data, affecting both kernel ...