Out-of-bounds Write

2023-11-0121:08:26

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

exfatprogs

out-of-bounds write

read_file_dentry_set

memory corruption

unintended behavior

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

7.3

Confidence

High

EPSS

Percentile

15.5%

JSON

exfatprogs is vulnerable to Out Of Bounds Write. The vulnerability is found in the read_file_dentry_set function within exfat2img.c. When the SecondaryCount exceeds a threshold of (2 plus the maximum number of File Name entries), it could potentially lead to writing data to memory locations beyond the intended buffer, possibly resulting in memory corruption or unintended behavior