Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-233g-c3hw-rh55

Опубликовано: 20 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write. This could lead to remote escalation of privilege in an unprivileged app with no additional execution privileges needed. User interaction is needed for exploitation.

In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write. This could lead to remote escalation of privilege in an unprivileged app with no additional execution privileges needed. User interaction is needed for exploitation.

EPSS

Процентиль: 71%
0.00715
Низкий

8.8 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 8.8
nvd
9 месяцев назад

In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write. This could lead to remote escalation of privilege in an unprivileged app with no additional execution privileges needed. User interaction is needed for exploitation.

EPSS

Процентиль: 71%
0.00715
Низкий

8.8 High

CVSS3

Дефекты

CWE-787