CVE-2024-57823

Summary

In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptor_uri_normalize_path().

Affected Software

Weaknesses

• CWE-191: CWE-191 Integer Underflow (Wrap or Wraparound)

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

CVE Program Container

Additional References

• https://lists.debian.org/debian-lts-announce/2025/10/msg00023.html

References

• https://github.com/pedrib/PoC/blob/master/fuzzing/raptor-fuzz.md
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067896
• https://github.com/dajobe/raptor/issues/70

• ←Previous
• Next→