Back

CVE-2024-33904

April 29, 2024, 12:42 p.m.

Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Hyprland

  • 0.39.1

Hyprland

  • 0.39.1
  • before 28c8561

Source

cve@mitre.org

Tags

CVE-2024-33904 details

Published : April 29, 2024, 6:15 a.m.
Last Modified : April 29, 2024, 12:42 p.m.

Description

In plugins/HookSystem.cpp in Hyprland through 0.39.1 (before 28c8561), through a race condition, a local attacker can cause execution of arbitrary assembly code by writing to a predictable temporary file.

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description

References

URL Source
https://github.com/hyprwm/Hyprland/commit/28c85619243e6320e75d7abcfe8244fa99d054dd cve@mitre.org
https://github.com/hyprwm/Hyprland/issues/5787 cve@mitre.org
https://www.openwall.com/lists/oss-security/2024/04/28/3 cve@mitre.org
This website uses the NVD API, but is not approved or certified by it.