CVSS 3.1 Score 7.5 of 10 (high)


Published Jan 19, 2024
Updated: Jan 26, 2024
CWE ID 407


CVE-2024-23684 is a vulnerability in the Java implementation of Concise Binary Object Representation (CBOR) versions 4.0.0 to 4.5.1, affecting multiple products. This vulnerability allows an attacker to cause a denial of service by exploiting an inefficient algorithmic complexity in the DecodeFromBytes function. Depending on how an application uses this library, the attack could be initiated remotely. The vulnerability has a high severity rating and a base score of 7.5 out of 10. It does not require any privileges or user interaction and can be exploited through the network. The potential danger to organizations lies in the possibility of service disruption due to the denial of service attack. Remediation measures should include updating the affected products to a version that addresses this vulnerability.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-23684 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options