CVE-2024-36626: Null Pointer Dereference
Published Nov 29, 2024
·Updated
In prestashop 8.1.4, a NULL pointer dereference was identified in the mathround function within Tools.php.
Affected Software
2 affected components
Prestashop PrestaShop
Prestashop PrestaShop=8.1.4
Remediation
Event History
Nov 29, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-36626?
CVE-2024-36626 is classified as a medium severity vulnerability due to the potential for application crashes.
2
How do I fix CVE-2024-36626?
To fix CVE-2024-36626, you should update to the latest version of PrestaShop where the vulnerability has been addressed.
3
What does CVE-2024-36626 affect?
CVE-2024-36626 affects PrestaShop version 8.1.4 and involves a NULL pointer dereference in the math_round function.
4
Can CVE-2024-36626 be exploited remotely?
Yes, CVE-2024-36626 can potentially be exploited remotely if an attacker can trigger the vulnerable function.
5
What is the impact of CVE-2024-36626 on my PrestaShop site?
The impact of CVE-2024-36626 may include application crashes or unexpected behavior when using the affected functionality.