Integer Underflow Vulnerability in Raptor RDF Syntax Library
CVE-2024-57823

9.3CRITICAL

Key Information:

Vendor

Librdf

Vendor
CVE Published:
10 January 2025

What is CVE-2024-57823?

The Raptor RDF Syntax Library versions up to 2.0.16 are susceptible to an integer underflow issue, particularly when normalizing a URI using the turtle parser. This vulnerability occurs within the function raptor_uri_normalize_path(), potentially allowing for unexpected behavior and security risks. It is crucial for users and developers utilizing this library to be aware of the issue and implement necessary updates or patches to mitigate risks associated with this flaw.

Affected Version(s)

Raptor RDF Syntax Library 0 <= 2.0.16

References

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.