CVE-2024-57822

Summary

In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptor_ntriples_parse_term_internal().

Affected Software

Weaknesses

• CWE-125: CWE-125 Out-of-bounds Read

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

Additional References

• https://github.com/pedrib/PoC/blob/master/fuzzing/raptor-fuzz.md

CVE Program Container

Additional References

• https://lists.debian.org/debian-lts-announce/2025/10/msg00023.html

References

• https://github.com/pedrib/PoC/blob/master/fuzzing/raptor-fuzz.md
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067896
• https://github.com/dajobe/raptor/issues/70

• ←Previous
• Next→