CVE-2024-8025

CVE-2024-8025 affects Nikon NEF Codec, in the NRW file parsing path. The flaw is a heap-based buffer overflow caused by missing validation of user-supplied data length before copying into a heap buffer, enabling Remote Code Execution . Exploitation requires user interaction (the target must visit...