CVE-2024-52917

MEDIUM Year: 2024
CVSS v3 Score
6.5
Medium
Weakness Type
CWE-770
View all →

Vulnerability Description

Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received over the network, e.g., large M-SEARCH replies from a fake UPnP device.

Related Vulnerabilities

CVE-2017-11525

MEDIUM
CVSS:6.5(Medium)

The ReadCINImage function in coders/cin.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.

CWE-7702017

CVE-2017-12432

MEDIUM
CVSS:6.5(Medium)

In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadPCXImage in coders/pcx.c, which allows attackers to cause a denial of service.

CWE-7702017

CVE-2017-12563

MEDIUM
CVSS:6.5(Medium)

In ImageMagick 7.0.6-2, a memory exhaustion vulnerability was found in the function ReadPSDImage in coders/psd.c, which allows attackers to cause a denial of service.

CWE-7702017

CVE-2017-12643

MEDIUM
CVSS:6.5(Medium)

ImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c.

CWE-7702017

CVE-2017-12691

MEDIUM
CVSS:6.5(Medium)

The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.

CWE-7702017

CVE-2017-12692

MEDIUM
CVSS:6.5(Medium)

The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted VIFF file.

CWE-7702017