VulnerabilityDeferred

CVE-2024-12650

An attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid memory area.

MEDIUM 5.4EPSS 0.29%

Does this matter?

Lower severity and a low EPSS score (0.29%). Track it; it rarely justifies an emergency change on its own.

Description

An attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid memory area. This could lead to a crash of the application but it does not affected other applications.

CVSS 3.1: 5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
EPSS: 0.29% probability · 21th percentile
CISA KEV: Not listed
Weakness: CWE-252
Source: info@cert.vde.com

References

https://cert.vde.com/en/advisories/VDE-2025-004

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.