CVE-2025-24302

CVE-2025-24302 affects Intel’s TinyCBOR library prior to version 0.6.1. The issue is described as uncontrolled recursion in TinyCBOR components, which may allow an authenticated user to escalate privileges via local access. The CVSS vectors indicate local, high impact on confidentiality, integrit...