CVE-2024-36600

Buffer Overflow Vulnerability in libcdio 2.2.0 (fixed in 2.3.0) allows an attacker to execute arbitrary code via a crafted ISO 9660 image file.

Score

CVSS 3.1 8.4 High

Status

Analyzed - cve@mitre.org

Published

2024-06-14

Last modified

2026-01-20

Weaknesses

CWE-121

Affected products

• Libcdio (Gnu)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=2292833
• https://github.com/gashasbi/My-Reports/tree/main/CVE-2024-36600
• https://github.com/libcdio/libcdio/pull/32
• https://github.com/libcdio/libcdio/pull/46