CVE-2024-57492
10.03.2025, 14:15
An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the round_up_to_page funciton.Enginsight
| Vendor | Product | Version |
|---|---|---|
| redox-os | redox | 0.8.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-190 - Integer Overflow or WraparoundThe software performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control.
- CWE-1262 - Improper Access Control for Register InterfaceThe product uses memory-mapped I/O registers that act as an interface to hardware functionality from software, but there is improper access control to those registers.