CVE-2024-42329

The webdriver for the Browser object expects an error object to be initialized when the webdriversessionquery function fails. But this function can fail for various reasons without an error description and then the wd-error will be NULL and trying to read from it will result in a crash...

CVE-2024-42329

CVE-2024-42329 affects Zabbix (versions 7.0.0–7.0.3) where the Browser object’s webdriver_session_query may fail without an initialized error object, leaving wd->error as NULL and causing a crash when read. Connected sources corroborate the same underlying flaw across various advisories (e.g.,...