CVE Catalog

CVE-2023-37365

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.51%

39th percentile - higher than 39% of all known CVEs

Summary

Hnswlib version 0.7.0 has a double free in init_index when the M argument is a large integer.

Risk Assessment

Double free can lead to unpredictable application behavior, including crashes or potential execution of malicious code.

Recommendation

It is recommended to update Hnswlib to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Hnswlib 0.7.0 has a double free in init_index when the M argument is a large integer.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS