CVE-2024-0962
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Jan 27, 2024
Updated: May 17, 2024
CWE ID 787
CWE ID 121
Summary
CVE-2024-0962 is a critical vulnerability affecting obgm libcoap 4.3.4. The issue lies within the get_split_entry function in src/coap_oscore.c, which is part of the Configuration File Handler component. This vulnerability results in a stack-based buffer overflow, making it exploitable remotely. The exploit has been made public, increasing the risk for potential attacks. It is strongly advised to apply the available patch to mitigate this issue. Vulnerability details are also tracked under VDB-252206.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.