Heap-Based Buffer Over-Read in Raptor RDF Syntax Library Affecting Data Processing

CVE-2024-57822

What is CVE-2024-57822?

The Raptor RDF Syntax Library, up to version 2.0.16, is susceptible to a heap-based buffer over-read. This vulnerability occurs when the nquads parser processes triples, specifically during the execution of the raptor_ntriples_parse_term_internal() function. An attacker can exploit this weakness to potentially gain unauthorized access to sensitive information or manipulate data, leading to compromised systems and data integrity.

References