CVE-2024-45287 — Multiple vulnerabilities in libnv

CVE-2024-45287

Multiple vulnerabilities in libnv PUBLISHED

Description (CNA)

A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a smaller buffer than required for the parsed data.

Affected (CNA)

Vendor / product	Versions
FreeBSD / FreeBSD	affected 14.1-RELEASE before p4; affected 14.0-RELEASE before p10; affected 13.3-RELEASE before p6

CWE

CWE-131, CWE-190

References

https://security.freebsd.org/advisories/FreeBSD-SA-24:09.libnv.asc

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://security.netapp.com/advisory/ntap-20240926-0010/