CVE-2024-36600

Description

Buffer Overflow Vulnerability in libcdio 2.2.0 (fixed in 2.3.0) allows an attacker to execute arbitrary code via a crafted ISO 9660 image file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/gashasbi/My-Reports/tree/main/CVE-2024-36600 ↗
• https://bugzilla.redhat.com/show_bug.cgi?id=2292833 ↗
• https://github.com/libcdio/libcdio/pull/32 ↗
• https://github.com/libcdio/libcdio/pull/46 ↗