CVE Catalog

CVE-2023-38632

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.58%

72th percentile - higher than 72% of all known CVEs

Summary

Versions of async-sockets-cpp up to 0.3.1 have a stack-based buffer overflow in tcpsocket.hpp when processing malformed TCP packets.

Risk Assessment

An attacker could exploit this vulnerability to execute malicious code, potentially leading to system compromise or data leakage.

Recommendation

It is recommended to upgrade to the latest version of async-sockets-cpp to mitigate this vulnerability.

Original NVD description (English source)

async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in tcpsocket.hpp when processing malformed TCP packets.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS