CVE-2024-50074 - Apache Linux Kernel Array Index Out-of-Bounds Write

CVE ID : CVE-2024-50074
Published : Oct. 29, 2024, 1:15 a.m. | 24 minutes ago
Description : In the Linux kernel, the following vulnerability has been resolved: parport: Proper fix for array out-of-bounds access The recent fix for array out-of-bounds accesses replaced sprintf() calls blindly with snprintf(). However, since snprintf() returns the would-be-printed size, not the actually output size, the length calculation can still go over the given limit. Use scnprintf() instead of snprintf(), which returns the actually output letters, for addressing the potential out-of-bounds access properly.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...