CVE-2024-13941

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-13941
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-13941.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-13941
Aliases
Published
2025-04-01T21:00:12.923Z
Modified
2026-07-15T01:48:54.277813375Z
Severity
  • 4.8 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVSS Calculator
Summary
ouch-org ouch zip.rs convert_zip_date_time memory corruption
Details

A vulnerability was found in ouch-org ouch up to 0.3.1. It has been classified as critical. This affects the function ouch::archive::zip::convertzipdate_time of the file zip.rs. The manipulation of the argument month leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 0.4.0 is able to address this issue. It is recommended to upgrade the affected component.

Database specific 
{
    "cwe_ids": [
        "CWE-119"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/13xxx/CVE-2024-13941.json",
    "cna_assigner": "VulDB"
}
References

Affected packages

Git / github.com/ouch-org/ouch

Affected ranges

Type
GIT
Repo
https://github.com/ouch-org/ouch
Events
Introduced
7ec969938563459a801bac5497d109da5b61df2d
Fixed
27c53f2db5f5ee65643234983d57a796d32fa81d
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0.3.0"
        },
        {
            "last_affected": "0.3.0"
        },
        {
            "introduced": "0.3.1"
        },
        {
            "last_affected": "0.3.1"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

0.*
0.3.0
0.3.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-13941.json"