CVE-2024-57823criticalCWE-191

CVE-2024-57823: critical vulnerability in librdf Raptor RDF Syntax Library

Published · Updated

Follow this CVE+ Monitor Raptor RDF Syntax Library+ Monitor raptor2

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 0.3%
In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptor_uri_normalize_path().
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
librdf · Raptor RDF Syntax Library
Related CVEs — librdf Raptor RDF Syntax Library

In the same product, most dangerous first.

CVE-2025-71436HIGHRaptor RDF Syntax Library 2.0.15 through 2.0.16 Heap Buffer Overflow via Language TagEPSS 0.5%CVE-2024-57822MEDIUMCVE-2024-57822EPSS 0.3%