PT-2024-26268 · Taurusxin · Ncmdump
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
taurusxin ncmdump version 1.3.2
Description
The issue allows attackers to cause a Denial of Service (DoS) via memory exhaustion by supplying a crafted .ncm file.
Recommendations
For version 1.3.2, consider avoiding the use of crafted .ncm files until a patch is available. As a temporary workaround, restrict the processing of .ncm files to minimize the risk of exploitation.
Exploit
Fix
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ncmdump