CVE-2024-53320
CVSS 3.1 Score 9.8 of 10 (high)
Details
Summary
CVE-2024-53320 is a newly disclosed vulnerability affecting the Qualisys C++ SDK. The vulnerability stems from commits a32a21a in the SDK's source code. This commit contains multiple stack buffer overflows, which can be exploited through the GetCurrentFrame, SaveCapture, and LoadProject functions. Attackers could potentially manipulate these functions to execute arbitrary code or cause a denial-of-service condition, posing a significant risk to affected systems. Users of the Qualisys C++ SDK are urged to apply the necessary patches or updates as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.