VDB
CVE-2024-43700
CVE-2024-43700
PUBLISHED
CVSS 7 HIGH
xfpt fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerability (CWE-121). Yuhei Kawakoya of NTT Security Holdings Corporation reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer.
EPSS 0.08% · 24.6th percentile
Risk Scores
CVSS 3.0
7
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.08%
24.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Philip Hazel | xfpt |
Exploit Intelligence
Timeline
- Aug 29, 2024 CVE Published
- Aug 30, 2024 EPSS Score
- Sep 19, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 9, 2024 EPSS Score
- Oct 17, 2024 Coalition ESS Score
- Oct 30, 2024 EPSS Score
- Nov 19, 2024 EPSS Score
- Nov 30, 2024 CVE Updated
- Dec 10, 2024 EPSS Score
- Dec 30, 2024 EPSS Score
- Jan 20, 2025 EPSS Score