CVE-2024-46488: Buffer Overflow
Published Sep 25, 2024
·Updated
sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.
Affected Software
5 affected componentsFixes available
rust/sqlite-vec<0.1.3
0.1.3
rubygems/sqlite-vec<0.1.3
0.1.3
npm/sqlite-vec<0.1.3
0.1.3
pip/sqlite-vec<0.1.3
0.1.3
Asg017 Sqlite-vec=0.1.1
Event History
Sep 25, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Advisory Published
via GitHub·06:31 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-46488?
CVE-2024-46488 is classified as a high severity vulnerability due to its potential to cause Denial of Service (DoS).
2
How do I fix CVE-2024-46488?
To fix CVE-2024-46488, upgrade to version 0.1.3 or higher of the sqlite-vec package.
3
What does CVE-2024-46488 affect?
CVE-2024-46488 affects versions of sqlite-vec prior to 0.1.3 across multiple package managers including rust, rubygems, npm, and pip.
4
What vulnerability types does CVE-2024-46488 involve?
CVE-2024-46488 involves a heap buffer overflow vulnerability found in the npy_token_next function.
5
What is the impact of exploiting CVE-2024-46488?
Exploiting CVE-2024-46488 can lead to Denial of Service (DoS) through the use of crafted files.