PT-2024-12289 · Precomp · Precomp

Sophrosynex · Published 2024-03-26 · Updated 2024-08-02 · CVE-2023-31854

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Precomp version 0.4.8

Description The issue involves the mishandling of std::bad alloc in Precomp, which is disputed as it may be categorized as a usability problem rather than a security issue. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

Recommendations For Precomp version 0.4.8, at the moment, there is no information about a newer version that contains a fix for this issue.

Related Identifiers

CVE-2023-31854

Affected Products

Precomp

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-31854 · Security Note
• https://osv.dev/vulnerability/CVE-2023-31854 · Vendor Advisory
• https://github.com/schnaader/precomp-cpp/issues/139 · Note
• https://twitter.com/awjso812/status/1772873011856851451 · Twitter Post
• https://twitter.com/CVEnew/status/1772864285745840333 · Twitter Post
• https://t.me/cvenotify/74784 · Telegram Post