CVE-2024-41206

Published: Nov 14, 2024Modified: Sep 5, 2025

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A stack-based buffer over-read in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Information Disclosure via a crafted TS video file.

Affected (1)

Products: Justdan96: Tsmuxer

Justdan96

1 product

Tsmuxer

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Justdan96 Tsmuxer	Version nightly-2024-03-14-01-51-12

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (1)

https://github.com/justdan96/tsMuxer/issues/859

Source: cve@mitre.org

ExploitIssue Tracking

Timeline

No history available yet.