← back
CVE-2024-57823

CVE-2024-57823

CVSS 9.3 CRITICALEPSS 0.3%CWE-191
In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptor_uri_normalize_path().
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
librdf · Raptor RDF Syntax Library

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067896https://github.com/dajobe/raptor/issues/70https://github.com/pedrib/PoC/blob/master/fuzzing/raptor-fuzz.mdhttps://lists.debian.org/debian-lts-announce/2025/10/msg00023.html