Description
A security vulnerability has been detected in happyfish100 libfastcommon up to 1.0.84. Affected by this vulnerability is the function base64_decode of the file src/base64.c. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. The identifier of the patch is 82f66af3e252e3e137dba0c3891570f085e79adf. Applying a patch is the recommended action to fix this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| happyfish100 | libfastcommon | 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.10, 1.0.11, 1.0.12, 1.0.13, 1.0.14, 1.0.15, 1.0.16, 1.0.17, 1.0.18, 1.0.19, 1.0.20, 1.0.21, 1.0.22, 1.0.23, 1.0.24, 1.0.25, 1.0.26, 1.0.27, 1.0.28, 1.0.29, 1.0.30, 1.0.31, 1.0.32, 1.0.33, 1.0.34, 1.0.35, 1.0.36, 1.0.37, 1.0.3… | — |
References
- VDB-344598 | happyfish100 libfastcommon base64.c base64_decode stack-based overflow vdb-entry technical-description
- VDB-344598 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #743873 | happyfish100 libfastcommon V1.0.84 and earlier Heap-based Buffer Overflow third-party-advisory
- https://github.com/happyfish100/libfastcommon/issues/55 issue-tracking
- https://github.com/happyfish100/libfastcommon/issues/55#issuecomment-3776757848 issue-tracking
- https://github.com/happyfish100/libfastcommon/issues/55#issue-3836362577 exploit issue-tracking
- https://github.com/happyfish100/libfastcommon/commit/82f66af3e252e3e137dba0c3891570f085e79adf patch
- https://github.com/happyfish100/libfastcommon/ product