VDB
CVE-2024-46613
CVE-2024-46613
PUBLISHED
CVSS 9.800000190734863 CRITICAL
WeeChat before 4.4.2 has an integer overflow and resultant buffer overflow at core/core-string.c when there are more than two billion items in a list. This affects string_free_split_shared , string_free_split, string_free_split_command, and string_free_split_tags.
EPSS 0.48% · 39.7th percentile
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.48%
39.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | *, n/a |
| weechat | weechat | 0.1.6, 0.1.6 |
| weechat | weechat | 0, 0 |
Timeline
- Nov 10, 2024 CVE Published
- Nov 10, 2024 Coalition ESS Score
- Nov 10, 2024 PoC Published
- Nov 10, 2024 PoC Published
- Nov 11, 2024 EPSS Score
- Nov 12, 2024 Coalition ESS Score
- Nov 14, 2024 Coalition ESS Score
- Nov 20, 2024 Coalition ESS Score
- Nov 29, 2024 EPSS Score
- Dec 18, 2024 EPSS Score
- Jan 5, 2025 EPSS Score
- Jan 23, 2025 EPSS Score