CVE-2024-34403

Name of the Vulnerable Software and Affected Versions: uriparser versions 0.9.7 and earlier

Description: The issue is related to an integer overflow in the ComposeQueryMallocExMm function in UriQuery.c, which can be triggered by a long string. This can potentially allow a remote attacker to execute arbitrary code.

Recommendations: For uriparser versions 0.9.7 and earlier, consider applying a patch or update when available to fix the integer overflow issue in the ComposeQueryMallocExMm function. As a temporary workaround, consider restricting input to prevent long strings from being processed by the ComposeQueryMallocExMm function until a patch is available.