CVE-2024-36702 Memory corruption in n/a
A heap overflow in libiec61850 allows attackers to execute arbitrary code or cause denial of service via crafted ASN.1 data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-36702?
CVE-2024-36702 is a high-severity memory corruption vulnerability in n/a, published on 11 Jun 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
libiec61850 v1.5 was discovered to contain a heap overflow via the BerEncoder_encodeLength function at /asn1/ber_encoder.c.
Which versions are affected by CVE-2024-36702?
It affects 1 product.
Products include Mz-Automation Libiec61850.
How do I fix CVE-2024-36702?
No fix has been published for CVE-2024-36702 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2024-36702 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-36702 exists.
Other vulnerabilities in n/a
Sources
Also known as GHSA-79gc-6j6c-pf3r.