Undergoing Analysis
CVE has been recently published to the CVE List and has been received by the NVD.
CVE has been recently published to the CVE List and has been received by the NVD.
Products
Miniscript (rust-miniscript)
- before 12.2.0
Source
cve@mitre.org
Tags
CVE-2024-44073 details
Published : Aug. 19, 2024, 3:15 a.m.
Last Modified : Aug. 19, 2024, 12:59 p.m.
Last Modified : Aug. 19, 2024, 12:59 p.m.
Description
The Miniscript (aka rust-miniscript) library before 12.2.0 for Rust allows stack consumption because it does not properly track tree depth.
CVSS Score
| 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|
References
| URL | Source |
|---|---|
| https://github.com/rust-bitcoin/rust-miniscript/compare/11.2.0...12.2.0 | cve@mitre.org |
| https://github.com/rust-bitcoin/rust-miniscript/pull/704 | cve@mitre.org |
| https://github.com/rust-bitcoin/rust-miniscript/pull/712 | cve@mitre.org |
This website uses the NVD API, but is not approved or certified by it.