CVE-2024-13941
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Apr 1, 2025
Updated: Apr 2, 2025
CWE ID 119
Summary
CVE-2024-13941 is a critical vulnerability affecting the ouch-org ouch software up to version 0.3.1. The issue lies in the function "convert_zip_date_time" of the file "zip.rs," where manipulation of the argument month leads to memory corruption. This vulnerability can be exploited locally, and the exploit has been disclosed to the public. Upgrading to version 0.4.0 is the recommended solution to mitigate this memory corruption issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- OUCH protocol
Affected Vendors
- Nasdaq