VDB
CVE-2024-43700
CVE-2024-43700
PUBLISHED
CVSS 7 HIGH
xfpt fails to handle appropriately some parameters inside the input data, resulting in a stack-based buffer overflow vulnerability (CWE-121). Yuhei Kawakoya of NTT Security Holdings Corporation reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer.
EPSS 0.26% · 17.4th percentile
Risk Scores
CVSS 3.0
7
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.26%
17.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Philip Hazel | xfpt |
Timeline
- Aug 29, 2024 CVE Published
- Aug 29, 2024 PoC Published
- Aug 30, 2024 EPSS Score
- Sep 19, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 10, 2024 EPSS Score
- Oct 17, 2024 Coalition ESS Score
- Oct 30, 2024 EPSS Score
- Nov 20, 2024 EPSS Score
- Nov 30, 2024 CVE Updated
- Dec 11, 2024 EPSS Score
- Dec 31, 2024 EPSS Score