CVE-2024-23684

—

CVSS 3.1

7.5 high

EPSS

<1%p58

Published

Jan 19, 2024 (Jan 19, 2024)

Modified

Jul 14, 2026

Description

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation (CBOR) versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use of this library, this may be a remote attacker.

Vendors: peteroupc
Products: cbor
Weakness: CWE-407
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.