Cherry
1 CVEs
product
Monthly
handle_request in http.c in cherry through 4b877df has an sscanf stack-based buffer overflow via a long URI, leading to remote code execution. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Buffer Overflow
RCE
Memory Corruption
Cherry
NVD
GitHub
CVSS 3.1
9.8
EPSS
3.2%
EPSS 3%
CVSS 9.8
CRITICAL
POC
Act Now
handle_request in http.c in cherry through 4b877df has an sscanf stack-based buffer overflow via a long URI, leading to remote code execution. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Buffer Overflow
RCE
Memory Corruption
+1
NVD
GitHub