💣Exploit CVE-2024-11991 - Motoko Garbage Collector Uninitialized Memory Access Vulnerability

[Maksim]

CVE ID : CVE-2024-11991
Published : Dec. 9, 2024, 3:15 p.m. | 40 minutes ago
Description : Motoko's incremental garbage collector is impacted by an uninitialized memory access bug, caused by incorrect use of write barriers in a few locations. This vulnerability could potentially allow unauthorized read or write access to a Canister's memory. However, exploiting this bug requires the Canister to enable the incremental garbage collector or enhanced orthogonal persistence, which are non-default features in Motoko.
Severity: 5.6 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.