Skip to main content

Out-of-bounds Write

CVE-2024-8948

High
7.5/10

Summary

A vulnerability was found in micropython versions prior to v1.24.0. It has been rated as critical. Affected by this issue is the function "mpz_as_bytes" of the file "py/objint.c". The manipulation leads to Heap-Based Buffer Overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended that a patch be applied to fix this issue. In the micropython "objint" component, converting zero from "int" to "bytes" leads to Heap Buffer-Overflow-Write at "mpz_as_bytes".

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-787 - Out-of-Bounds Write

Out-of-bounds write vulnerability is a memory access bug that allows software to write data past the end or before the beginning of the intended buffer. This may result in the corruption of data, a crash, or arbitrary code execution.

References

Advisory Timeline

  • Published