CVE-2020-24753
A memory corruption vulnerability in Objective Open CBOR Run-time (oocborrt) in versions before 2020-08-12 could allow an attacker to execute code via crafted Concise Binary Object Representation (CBOR) input to the cbor2json decoder.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.64%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A memory corruption vulnerability in Objective Open CBOR Run-time (oocborrt) in versions before 2020-08-12 could allow an attacker to execute code via crafted Concise Binary Object Representation (CBOR) input to the cbor2json decoder. An uncaught error while decoding CBOR Major Type 3 text strings leads to the use of an attacker-controllable uninitialized stack value. This can be used to modify memory, causing a crash or potentially exploitable heap corruption.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 2.64% probability · 85th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-755, CWE-787, CWE-908
- Affected
- objective open cbor run-time project/objective open cbor run-time
- Source
- cve@mitre.org
References
- https://github.com/objsys/oocborrt/commit/539851c66778f68a244633985f6f8d0df94ea3b3Patch, Third Party Advisory
- https://warcollar.com/cve-2020-24753.htmlExploit, Third Party Advisory
- https://github.com/objsys/oocborrt/commit/539851c66778f68a244633985f6f8d0df94ea3b3Patch, Third Party Advisory
- https://warcollar.com/cve-2020-24753.htmlExploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.