CVE-2024-40897

A stack-based buffer overflow vulnerability exists in orcparse.c of the ORC compiler in versions prior to 0.4.39 . An attacker could trick a developer into processing a specially crafted file, potentially leading to arbitrary code execution on the developer's machine or within a CI build environm...