NULL Pointer Dereference Vulnerability in PrestaShop 8.1.4
CVE-2024-36626

5.3MEDIUM

Key Information:

Vendor: PrestaShop
Vendor: CVE Published:; 29 November 2024

🔔 Create PrestaShop Vulnerability Alert

What is CVE-2024-36626?

In prestashop 8.1.4, a NULL pointer dereference was identified in the math_round function within Tools.php.

References

https://github.com/prestashop/prestashop/commit/20fa54229...

https://github.com/PrestaShop/PrestaShop/blob/8.1.4/class...

https://gist.github.com/1047524396/25c45b61a6374e0fdaf720...

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 29, 2024
Vulnerability Reserved
May 30, 2024

CVE-2024-36626 Data

.