CVE-2021-41737

In Faust 2.23.1, an input file with the lines "// r visualisation tCst" and "//process = +: L: abM-^Q;" and "process = route(3333333333333333333,2,1,2,3,1) : *;" leads to stack consumption.

Score

CVSS 3.1 7.5 High

Status

Deferred - cve@mitre.org

Published

2024-11-10

Last modified

2024-11-19

Weaknesses

CWE-674

Affected products

• Faust (Grame)

References

• https://github.com/grame-cncm/faust/issues/653
• https://github.com/grame-cncm/faust/tree/e682dbeeb7cc0ec9a1fcb6872f53433e454aa233