Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-233g-c3hw-rh55

Опубликовано: 20 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write. This could lead to remote escalation of privilege in an unprivileged app with no additional execution privileges needed. User interaction is needed for exploitation.

In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write. This could lead to remote escalation of privilege in an unprivileged app with no additional execution privileges needed. User interaction is needed for exploitation.

EPSS

Процентиль: 72%
0.00756
Низкий

8.8 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 8.8
nvd
12 месяцев назад

In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write. This could lead to remote escalation of privilege in an unprivileged app with no additional execution privileges needed. User interaction is needed for exploitation.

EPSS

Процентиль: 72%
0.00756
Низкий

8.8 High

CVSS3

Дефекты

CWE-787