VDB
GCVE-110-MAGEIA-2024-371
GCVE-110-MAGEIA-2024-371
Advisory Published
Tencent RapidJSON is vulnerable to privilege escalation due to an
integer underflow in the `GenericReader::ParseNumber()` function of
`include/rapidjson/reader.h` when parsing JSON text from a stream. An
attacker needs to send the victim a crafted file which needs to be
opened; this triggers the integer underflow vulnerability (when the file
is parsed), leading to elevation of privilege. (CVE-2024-38517)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | rapidjson | 0 (affected), 1.1.0-6.1.mga9 (unaffected) | — |
Browse GCVE Records
72,337 records in the GCVE database · Updated July 14, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.