CVE-2024-58392: PhysicsFS through 3.2.0 Out-of-Bounds Read via __PHYSFS_utf8codepoint
PhysicsFS through 3.2.0 contains an out-of-bounds read vulnerability in PHYSFSutf8codepoint() that allows attackers to read past name buffers via an off-by-one cursor advance on six-octet UTF-8 sequences. Attackers can supply a crafted archive with entry names ending in six-octet sequences, causing PHYSFSutf8stricmp() and hashing to over-read and crash the application.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Applications using PhysicsFS through 3.2.0 are exposed when they process attacker-supplied archives containing crafted entry names. The issue is triggered during UTF-8 string comparison or hashing of archive entry names.
What does an attacker need to exploit it?
An attacker needs to provide a crafted archive with an entry name that ends in a six-octet UTF-8 sequence. Exploitation also requires a user or application workflow that opens or processes that archive.
What is the expected impact?
The out-of-bounds read can cause the application to read past the entry-name buffer and crash. The provided severity vector indicates availability impact only, with no stated confidentiality or integrity impact.