← CVE Intelligence

CVE-2024-45288

Multiple vulnerabilities in libnv PUBLISHED

Description (CNA)

A missing null-termination character in the last element of an nvlist array string can lead to writing outside the allocated buffer.

Affected (CNA)

Vendor / productVersions
FreeBSD / FreeBSDaffected 14.1-RELEASE before p4; affected 14.0-RELEASE before p10; affected 13.3-RELEASE before p6

CWE

CWE-170, CWE-787

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.