CVE-2024-50610 Integer overflow in n/a
An integer signedness error in GSL allows attackers to trigger incorrect memory allocation, potentially leading to denial of service or code execution.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-50610?
CVE-2024-50610 is a low-severity vulnerability in n/a, published on 27 Oct 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs.
Weakness: CWE-190
Which versions are affected by CVE-2024-50610?
It affects 1 product.
Linux distribution packages (1)
gsl openSUSE:Tumbleweed | All versions | 2.8-5.1 |
Products include Gnu Gnu Scientific Library.
How do I fix CVE-2024-50610?
Apply the vendor's patch.
Is CVE-2024-50610 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-50610 exists.
Sources
Also known as AZL-51868, AZL-51881, DEBIAN-CVE-2024-50610, GHSA-pj8w-xcg3-82vx, OESA-2024-2361, UBUNTU-CVE-2024-50610 and 1 more.