Dashboard / CVE-2024-23684

CVE-2024-23684

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2024-01-19 Modified: 2026-11-08 First seen: 2026-11-08 Status: pending_score

Description

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation (CBOR) versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use of this library, this may be a remote attacker.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
— — 4.0.0 < 4.5.1

References & Advisories (3)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.92%
Raw Score 0.009200
Percentile 60.8%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00920
2026-11-12
0.00920
2026-11-10
0.00920
2026-11-09
0.00920
2026-11-08
0.00920

Intelligence Sources

mitre ref →

External Links