CVE-2023-36328
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk66th percentile - higher than 66% of all known CVEs
Summary
Integer Overflow vulnerability in mp_grow in libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9 allows attackers to execute arbitrary code and cause a denial of service (DoS).
Risk Assessment
This vulnerability may lead to unauthorized access to the system and disruption of its operation, which can have serious consequences for the organization.
Recommendation
It is recommended to update the libtommath library to a version that includes the fix after commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9 to minimize the risk associated with this vulnerability.
Original NVD description (English source)
Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS).