PT-2024-26436 · Libyaml · Libyaml

Published 2024-06-11 · Updated 2024-08-28 · CVE-2024-35329

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions libyaml version 0.2.5

Description The issue is related to a heap-based Buffer Overflow in the yaml document add sequence function in api.c.

Recommendations For libyaml version 0.2.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2024-35329

Affected Products

Libyaml

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-35329 · Security Note
• https://t.me/cvenotify/83077 · Telegram Post
• https://t.me/cvenotify/88430 · Telegram Post
• https://t.me/cvenotify/82729 · Telegram Post