deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-25610
Published: 2024-02-20
Description: In Liferay Portal 7.2.0 through 7.4.3.12, and older unsupported versions, and Liferay DXP 7.4 before update 9, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions, the default configuration does not sanitize blog entries of JavaScript, which allows remote authenticated users to inject arbitrary web script or HTML (XSS) via a crafted payload injected into a blog entry’s content text field.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-1188, CWE-1188
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-25610; https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-25610
CVE: CVE-2024-26265
Published: 2024-02-20
Description: The Image Uploader module in Liferay Portal 7.2.0 through 7.4.3.15, and older unsupported versions, and Liferay DXP 7.4 before update 16, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions relies on a request parameter to limit the size of files that can be uploaded, which allows remote authenticated users to upload arbitrarily large files to the system's temp folder by modifying the `maxFileSize` parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-770, CWE-770
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-26265; https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-26265
CVE: CVE-2024-26267
Published: 2024-02-20
Description: In Liferay Portal 7.2.0 through 7.4.3.25, and older unsupported versions, and Liferay DXP 7.4 before update 26, 7.3 before update 5, 7.2 before fix pack 19, and older unsupported versions the default value of the portal property `http.header.version.verbosity` is set to `full`, which allows remote attackers to easily identify the version of the application that is running and the vulnerabilities that affect that version via 'Liferay-Portal` response header.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1188, CWE-1188
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-26267; https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-26267
CVE: CVE-2024-26581
Published: 2024-02-20
Description: In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_set_rbtree: skip end interval element from gc

rbtree lazy gc on insert might collect an end interval element that has
been just added in this transactions, skip end interval elements that
are not yet active.
CVSS Score: 7.8 (HIGH)
References: https://git.kernel.org/stable/c/10e9cb39313627f2eae4cd70c4b742074e998fd8; https://git.kernel.org/stable/c/1296c110c5a0b45a8fcf58e7d18bc5da61a565cb; https://git.kernel.org/stable/c/2bab493a5624444ec6e648ad0d55a362bcb4c003
CVE: CVE-2023-42791
Published: 2024-02-20
Description: A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through 6.4.12 and 6.2.0 through 6.2.11 allows attacker to execute unauthorized code or commands via crafted HTTP requests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-23, CWE-22
References: https://fortiguard.com/psirt/FG-IR-23-189; https://fortiguard.com/psirt/FG-IR-23-189
CVE: CVE-2023-50306
Published: 2024-02-20
Description: IBM Common Licensing 9.0 could allow a local user to enumerate usernames due to an observable response discrepancy.  IBM X-Force ID:  273337.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-204, CWE-203
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/273337; https://www.ibm.com/support/pages/node/7120660; https://exchange.xforce.ibmcloud.com/vulnerabilities/273337
CVE: CVE-2024-1546
Published: 2024-02-20
Description: When storing and re-accessing data on a networking channel, the length of buffers may have been confused, resulting in an out-of-bounds memory read. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1843752; https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html; https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html
CVE: CVE-2024-1547
Published: 2024-02-20
Description: Through a series of API calls and redirects, an attacker-controlled alert dialog could have been displayed on another website (with the victim website's URL shown). This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-290
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1877879; https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html; https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html
CVE: CVE-2024-1548
Published: 2024-02-20
Description: A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.
CVSS Score: 4.3 (MEDIUM)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1832627; https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html; https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html
CVE: CVE-2024-1549
Published: 2024-02-20
Description: If a website set a large custom cursor, portions of the cursor could have overlapped with the permission dialog, potentially resulting in user confusion and unexpected granted permissions. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.
CVSS Score: 6.1 (MEDIUM)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1833814; https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html; https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html
CVE: CVE-2024-1550
Published: 2024-02-20
Description: A malicious website could have used a combination of exiting fullscreen mode and `requestPointerLock` to cause the user's mouse to be re-positioned unexpectedly, which could have led to user confusion and inadvertently granting permissions they did not intend to grant. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-1021, CWE-1021
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1860065; https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html; https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html
CVE: CVE-2024-1551
Published: 2024-02-20
Description: Set-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an attacker could control the Content-Type response header, as well as control part of the response body, they could inject Set-Cookie response headers that would have been honored by the browser. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-565
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1864385; https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html; https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html
CVE: CVE-2024-1552
Published: 2024-02-20
Description: Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.*Note:* This issue only affects 32-bit ARM devices. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.
CVSS Score: 7.5 (HIGH)
CWE: CWE-681, CWE-681
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1874502; https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html; https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html
CVE: CVE-2024-1553
Published: 2024-02-20
Description: Memory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1855686%2C1867982%2C1871498%2C1872296%2C1873521%2C1873577%2C1873597%2C1873866%2C1874080%2C1874740%2C1875795%2C1875906%2C1876425%2C1878211%2C1878286; https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html; https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html
CVE: CVE-2024-1554
Published: 2024-02-20
Description: The `fetch()` API and navigation incorrectly shared the same cache, as the cache key did not include the optional headers `fetch()` may contain.  Under the correct circumstances, an attacker may have been able to poison the local browser cache by priming it with a `fetch()` response controlled by the additional headers. Upon navigation to the same URL, the user would see the cached response instead of the expected response. This vulnerability affects Firefox < 123.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-345
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1816390; https://www.mozilla.org/security/advisories/mfsa2024-05/; https://bugzilla.mozilla.org/show_bug.cgi?id=1816390
CVE: CVE-2024-1555
Published: 2024-02-20
Description: When opening a website using the `firefox://` protocol handler, SameSite cookies were not properly respected. This vulnerability affects Firefox < 123.
CVSS Score: 8.3 (HIGH)
CWE: CWE-290
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1873223; https://www.mozilla.org/security/advisories/mfsa2024-05/; https://bugzilla.mozilla.org/show_bug.cgi?id=1873223
CVE: CVE-2024-1556
Published: 2024-02-20
Description: The incorrect object was checked for NULL in the built-in profiler, potentially leading to invalid memory access and undefined behavior. *Note:* This issue only affects the application when the profiler is running. This vulnerability affects Firefox < 123.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-754
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1870414; https://www.mozilla.org/security/advisories/mfsa2024-05/; https://bugzilla.mozilla.org/show_bug.cgi?id=1870414
CVE: CVE-2024-1557
Published: 2024-02-20
Description: Memory safety bugs present in Firefox 122. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 123.
CVSS Score: 8.1 (HIGH)
CWE: CWE-787
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1746471%2C1848829%2C1864011%2C1869175%2C1869455%2C1869938%2C1871606; https://www.mozilla.org/security/advisories/mfsa2024-05/; https://bugzilla.mozilla.org/buglist.cgi?bug_id=1746471%2C1848829%2C1864011%2C1869175%2C1869455%2C1869938%2C1871606
CVE: CVE-2024-25196
Published: 2024-02-20
Description: Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a buffer overflow via the nav2_controller process. This vulnerability is triggerd via sending a crafted .yaml file.
CVSS Score: 3.3 (LOW)
CWE: CWE-120
References: https://github.com/ros-planning/navigation2/issues/4005; https://github.com/ros-planning/navigation2/pull/4017; https://robotics.stackexchange.com/questions/106008/ros2nav2user-misconfiguration-of-parameters-may-cause-instantaneous-crashs
CVE: CVE-2024-25197
Published: 2024-02-20
Description: Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent() function at /src/layered_costmap.cpp.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/ros-planning/navigation2/issues/3940; https://github.com/ros-planning/navigation2/issues/3958; https://github.com/ros-planning/navigation2/issues/3971
CVE: CVE-2024-25198
Published: 2024-02-20
Description: Inappropriate pointer order of laser_scan_filter_.reset() and tf_listener_.reset() (amcl_node.cpp) in Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions leads to a use-after-free.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-416
References: https://github.com/ros-planning/navigation2/blob/main/nav2_amcl/src/amcl_node.cpp#L331-L344; https://github.com/ros-planning/navigation2/pull/4068; https://github.com/ros-planning/navigation2/pull/4070
CVE: CVE-2024-25199
Published: 2024-02-20
Description: Inappropriate pointer order of map_sub_ and map_free(map_) (amcl_node.cpp) in Open Robotics Robotic Operating Sytstem 2 (ROS2) and Nav2 humble versions leads to a use-after-free.
CVSS Score: 8.1 (HIGH)
CWE: CWE-416
References: https://github.com/ros-planning/navigation2/blob/main/nav2_amcl/src/amcl_node.cpp#L331-L344; https://github.com/ros-planning/navigation2/pull/4078; https://github.com/ros-planning/navigation2/pull/4079
CVE: CVE-2024-26268
Published: 2024-02-20
Description: User enumeration vulnerability in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 8, 7.2 before fix pack 20, and older unsupported versions allows remote attackers to determine if an account exist in the application by comparing the request's response time.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203, CWE-203
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-26268; https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-26268
CVE: CVE-2024-26270
Published: 2024-02-20
Description: The Account Settings page in Liferay Portal 7.4.3.76 through 7.4.3.99, and Liferay DXP 2023.Q3 before patch 5, and 7.4 update 76 through 92 embeds the user’s hashed password in the page’s HTML source, which allows man-in-the-middle attackers to steal a user's hashed password.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-201
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-26270; https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2024-26270
CVE: CVE-2023-38562
Published: 2024-02-20
Description: A double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted set of network packets can lead to memory corruption, potentially resulting in code execution. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.
CVSS Score: 8.7 (HIGH)
CWE: CWE-415
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1829; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1829; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1829
CVE: CVE-2023-39540
Published: 2024-02-20
Description: A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability concerns a denial of service within the parsing an IPv4 ICMP packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1828; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1828; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1828
CVE: CVE-2023-39541
Published: 2024-02-20
Description: A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability concerns a denial of service within the parsing an IPv6 ICMPv6 packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1828; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1828; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1828
CVE: CVE-2023-45318
Published: 2024-02-20
Description: A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004. A specially crafted network packet can lead to arbitrary code execution. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1843; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1843; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1843
CVE: CVE-2024-1155
Published: 2024-02-20
Description: Incorrect permissions in the installation directories for shared SystemLink Elixir based services may allow an authenticated user to potentially enable escalation of privilege via local access. 

CVSS Score: 7.8 (HIGH)
CWE: CWE-276, CWE-863
References: https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/incorrect-permissions-for-shared-systemlink-elixir-based-service.html; https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/incorrect-permissions-for-shared-systemlink-elixir-based-service.html
CVE: CVE-2024-1156
Published: 2024-02-20
Description: Incorrect directory permissions for the shared NI RabbitMQ service may allow a local authenticated user to read RabbitMQ configuration information and potentially enable escalation of privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276, CWE-863
References: https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/incorrect-permissions-for-shared-systemlink-elixir-based-service.html; https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/incorrect-permissions-for-shared-systemlink-elixir-based-service.html
CVE: CVE-2024-22369
Published: 2024-02-20
Description: Deserialization of Untrusted Data vulnerability in Apache Camel SQL ComponentThis issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22.0 before 3.22.1, from 4.0.0 before 4.0.4, from 4.1.0 before 4.4.0.

Users are recommended to upgrade to version 4.4.0, which fixes the issue. If users are on the 4.0.x LTS releases stream, then they are suggested to upgrade to 4.0.4. If users are on 3.x, they are suggested to move to 3.21.4 or 3.22.1


CVSS Score: 7.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://lists.apache.org/thread/3dko781dy2gy5l3fs48p56fgp429yb0f; https://lists.apache.org/thread/3dko781dy2gy5l3fs48p56fgp429yb0f
CVE: CVE-2024-22824
Published: 2024-02-20
Description: An issue in Timo v.2.0.3 allows a remote attacker to execute arbitrary code via the filetype restrictions in the UploadController.java component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/auntvt/Timo/issues/6; https://github.com/auntvt/Timo/issues/6
CVE: CVE-2024-23114
Published: 2024-02-20
Description: Deserialization of Untrusted Data vulnerability in Apache Camel CassandraQL Component AggregationRepository which is vulnerable to unsafe deserialization. Under specific conditions it is possible to deserialize malicious payload.This issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22.0 before 3.22.1, from 4.0.0 before 4.0.4, from 4.1.0 before 4.4.0.

Users are recommended to upgrade to version 4.4.0, which fixes the issue. If users are on the 4.0.x LTS releases stream, then they are suggested to upgrade to 4.0.4. If users are on 3.x, they are suggested to move to 3.21.4 or 3.22.1


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://camel.apache.org/security/CVE-2024-23114.html; https://camel.apache.org/security/CVE-2024-23114.html
CVE: CVE-2024-21795
Published: 2024-02-20
Description: A heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .egi file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1920; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OIRLGNQM33KAWVWP5RPMAPHWNP3IY5YW/; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1920
CVE: CVE-2024-21812
Published: 2024-02-20
Description: An integer overflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to an out-of-bounds write which in turn can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1921; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OIRLGNQM33KAWVWP5RPMAPHWNP3IY5YW/; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1921
CVE: CVE-2024-22097
Published: 2024-02-20
Description: A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch (ab0ee111) and 2.5.0. A specially crafted .vdhr file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1917; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OIRLGNQM33KAWVWP5RPMAPHWNP3IY5YW/; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1917
CVE: CVE-2024-23305
Published: 2024-02-20
Description: An out-of-bounds write vulnerability exists in the BrainVisionMarker Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .vmrk file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1918; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OIRLGNQM33KAWVWP5RPMAPHWNP3IY5YW/; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1918
CVE: CVE-2024-23310
Published: 2024-02-20
Description: A use-after-free vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-825, CWE-416
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1923; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OIRLGNQM33KAWVWP5RPMAPHWNP3IY5YW/; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1923
CVE: CVE-2024-23313
Published: 2024-02-20
Description: An integer underflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to an out-of-bounds write which in turn can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-191
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1922; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OIRLGNQM33KAWVWP5RPMAPHWNP3IY5YW/; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1922