PT-2024-30937 · Unknown · Miniscript
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Miniscript library versions prior to 12.2.0
Description
The issue allows stack consumption because the Miniscript library does not properly track tree depth.
Recommendations
For versions prior to 12.2.0, update to version 12.2.0 or later to resolve the issue.
Exploit
Fix
Uncontrolled Recursion
Memory Corruption
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Miniscript