CVE-2024-53856
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Dec 5, 2024
CWE ID 148
CWE ID 130
CWE ID 617
Summary
CVE-2024-53856 is a vulnerability affecting the rPGP OpenPGP implementation in Rust. prior to version 0.14.1, rPGP was susceptible to crashes caused by specially crafted data. This issue posed a potential security risk, as crashes could lead to denial-of-service attacks or even data exposure. The vulnerability has been addressed in version 0.14.1, ensuring that the rPGP library is now more resilient against such attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.