AZL-108312
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-108312.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-108312
- Upstream
- Published
- 2026-10-14T15:17:00Z
- Modified
- 2026-10-20T05:33:05Z
- Summary
- CVE-2024-58392 affecting package physfs 3.0.2-4
- Details
-
PhysicsFS through 3.2.0 contains an out-of-bounds read vulnerability in __PHYSFS_utf8codepoint() that allows attackers to read past name buffers via an off-by-one cursor advance on six-octet UTF-8 sequences. Attackers can supply a crafted archive with entry names ending in six-octet sequences, causing PHYSFS_utf8stricmp() and hashing to over-read and crash the application.
- References