CVE-2024-41209

Published: Nov 14, 2024Modified: Sep 5, 2025

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A heap-based buffer overflow in tsMuxer version nightly-2024-03-14-01-51-12 allows attackers to cause Denial of Service (DoS) and Code Execution via a crafted MOV video file.

Affected (1)

Products: Justdan96: Tsmuxer

Justdan96

1 product

Tsmuxer

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Justdan96 Tsmuxer	Version nightly-2024-03-14-01-51-12

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (2)

https://github.com/justdan96/tsMuxer/issues/841

Source: cve@mitre.org

ExploitIssue Tracking

https://ricercasecurity.blogspot.com/2024/10/rezzuf0-day-cve-2024-41209.html

Source: cve@mitre.org

ExploitThird Party Advisory

Timeline

No history available yet.