CVE-2024-8948

Name of the Vulnerable Software and Affected Versions: MicroPython version 1.23.0

Description: A critical issue has been found, affecting the mpz as bytes function of the file py/objint.c. This issue leads to a heap-based buffer overflow. The attack can be launched remotely. The problem arises when converting zero from int to bytes, resulting in a heap buffer-overflow-write at mpz as bytes.

Recommendations: For MicroPython version 1.23.0, apply a patch to fix this issue, specifically the patch identified as 908ab1ceca15ee6fd0ef82ca4cba770a3ec41894. As a temporary workaround, consider disabling the mpz as bytes function until a patch is available.