Buffer Overflow Vulnerability in bwoodsend Rockhopper Binary Parser

CVE-2022-4969

What is CVE-2022-4969?

A critical vulnerability has been detected in the bwoodsend Rockhopper product, specifically in the Binary Parser component within the function count_rows found in ragged_array.c. This vulnerability allows for a buffer overflow, which occurs due to improper handling of the argument 'raw'. Local access to the system is necessary for an attacker to exploit this flaw. Users are strongly advised to upgrade to version 0.2.0, which includes the necessary patch (commit ID: 1a15fad5e06ae693eb9b8908363d2c8ef455104e) to effectively mitigate this issue.

References