[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2024-6197":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T17:19:26.604Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":18,"aliases":28,"duplicate_of":9,"upstream":29,"downstream":30,"duplicates":43,"related":44,"reserved_at":9,"published_at":48,"modified_at":49,"state":50,"summary":51,"references_raw":59,"kevs":90,"epss":91,"epss_history":94,"metrics":354,"affected":362},"CVE-2024-6197","libcurl's ASN1 parser has this utf8asn1str() function used for parsing an ASN.1 UTF-8 string. Itcan detect an invalid field and return error. Unfortunately, when doing so it also invokes `free()` on a 4 byte localstack buffer.  Most modern malloc implementations detect this error and immediately abort. Some however accept the input pointer and add that memory to its list of available chunks. This leads to the overwriting of nearby stack memory. The content of the overwrite is decided by the `free()` implementation; likely to be memory pointers and a set of flags.  The most likely outcome of exploting this flaw is a crash, although it cannot be ruled out that more serious results can be had in special circumstances.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"NVD-CWE-OTHER","Other","NVD uses this CWE ID when the weakness does not map to any existing CWE entry.","placeholder","NVD-Reserved",[],[19],{"_key":20,"name":21,"source":22,"url":23,"maturity":24,"reliability_score":25,"verified":26,"type":9,"platforms":27,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_641F94CF509F5420","Exploit Reference (hackerone.com)","reference","https://hackerone.com/reports/2559516","unknown",0.2,false,[],[],[],[31,33,35,37,39,41],{"_key":32},"UBUNTU-CVE-2024-6197",{"_key":34},"SUSE-SU-2024:2784-1",{"_key":36},"OPENSUSE-SU-2024:14225-1",{"_key":38},"SUSE-SU-2025:20029-1",{"_key":40},"ALPINE-CVE-2024-6197",{"_key":42},"DEBIAN-CVE-2024-6197",[],[45,46,47],{"_key":34},{"_key":36},{"_key":38},"2024-07-24T07:29:50.003Z","2025-02-13T17:54:41.039Z","Modified",{"cisa_kev":26,"cisa_ransomware":26,"cisa_vendor":9,"epss_severity":52,"epss_score":53,"severity":54,"severity_score":55,"severity_version":56,"severity_source":57,"severity_vector":58,"severity_status":50},"low",0.04296,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[60,66,70,76,82,86],{"url":61,"sources":62,"tags":64},"https://curl.se/docs/CVE-2024-6197.json",[57,63],"nvd",[65],"Vendor Advisory",{"url":67,"sources":68,"tags":69},"https://curl.se/docs/CVE-2024-6197.html",[57,63],[65],{"url":23,"sources":71,"tags":72},[57,63],[73,74,75],"Exploit","Issue Tracking","Technical Description",{"url":77,"sources":78,"tags":79},"http://www.openwall.com/lists/oss-security/2024/07/24/1",[57,63],[80,81],"Mailing List","Third Party Advisory",{"url":83,"sources":84,"tags":85},"http://www.openwall.com/lists/oss-security/2024/07/24/5",[57,63],[80,81],{"url":87,"sources":88,"tags":89},"https://security.netapp.com/advisory/ntap-20241129-0008/",[57,63],[],[],{"date":92,"score":53,"percentile":93},"2026-07-06",0.89949,[95,99,102,105,108,111,113,116,119,122,125,128,131,133,135,139,142,145,148,151,154,157,160,163,166,168,170,173,177,180,182,184,187,190,193,196,199,202,205,208,212,214,216,219,222,225,228,231,234,236,239,242,245,248,251,254,257,260,263,267,269,272,275,278,280,283,286,289,291,294,296,299,301,304,307,310,313,316,319,322,325,328,331,334,337,340,343,346,348,351],{"date":96,"score":97,"percentile":98},"2025-11-04",0.01278,0.78904,{"date":100,"score":97,"percentile":101},"2025-11-05",0.78903,{"date":103,"score":97,"percentile":104},"2025-11-06",0.78902,{"date":106,"score":97,"percentile":107},"2025-11-07",0.78914,{"date":109,"score":97,"percentile":110},"2025-11-08",0.7892,{"date":112,"score":97,"percentile":107},"2025-11-09",{"date":114,"score":97,"percentile":115},"2025-11-10",0.78901,{"date":117,"score":97,"percentile":118},"2025-11-11",0.78905,{"date":120,"score":97,"percentile":121},"2025-11-12",0.78922,{"date":123,"score":97,"percentile":124},"2025-11-13",0.78931,{"date":126,"score":97,"percentile":127},"2025-11-14",0.78937,{"date":129,"score":97,"percentile":130},"2025-11-15",0.78936,{"date":132,"score":97,"percentile":127},"2025-11-16",{"date":134,"score":97,"percentile":124},"2025-11-17",{"date":136,"score":137,"percentile":138},"2025-11-18",0.04381,0.87868,{"date":140,"score":137,"percentile":141},"2025-11-19",0.87871,{"date":143,"score":137,"percentile":144},"2025-11-20",0.87875,{"date":146,"score":97,"percentile":147},"2025-11-21",0.78956,{"date":149,"score":97,"percentile":150},"2025-11-22",0.78958,{"date":152,"score":97,"percentile":153},"2025-11-23",0.78947,{"date":155,"score":97,"percentile":156},"2025-11-24",0.78945,{"date":158,"score":97,"percentile":159},"2025-11-25",0.7895,{"date":161,"score":97,"percentile":162},"2025-11-26",0.78952,{"date":164,"score":97,"percentile":165},"2025-11-27",0.78955,{"date":167,"score":97,"percentile":153},"2025-11-28",{"date":169,"score":97,"percentile":165},"2025-11-29",{"date":171,"score":97,"percentile":172},"2025-11-30",0.78954,{"date":174,"score":175,"percentile":176},"2025-12-01",0.00756,0.72572,{"date":178,"score":175,"percentile":179},"2025-12-02",0.72584,{"date":181,"score":175,"percentile":179},"2025-12-03",{"date":183,"score":97,"percentile":172},"2025-12-04",{"date":185,"score":97,"percentile":186},"2025-12-05",0.7896,{"date":188,"score":97,"percentile":189},"2025-12-06",0.78961,{"date":191,"score":97,"percentile":192},"2025-12-07",0.78962,{"date":194,"score":97,"percentile":195},"2025-12-08",0.78966,{"date":197,"score":97,"percentile":198},"2025-12-09",0.78983,{"date":200,"score":97,"percentile":201},"2025-12-10",0.79005,{"date":203,"score":97,"percentile":204},"2025-12-11",0.79019,{"date":206,"score":97,"percentile":207},"2025-12-12",0.79039,{"date":209,"score":210,"percentile":211},"2025-12-13",0.01302,0.79213,{"date":213,"score":210,"percentile":211},"2025-12-14",{"date":215,"score":210,"percentile":211},"2025-12-15",{"date":217,"score":210,"percentile":218},"2025-12-16",0.79224,{"date":220,"score":210,"percentile":221},"2025-12-17",0.79232,{"date":223,"score":210,"percentile":224},"2025-12-18",0.79251,{"date":226,"score":210,"percentile":227},"2025-12-19",0.79261,{"date":229,"score":210,"percentile":230},"2025-12-20",0.79257,{"date":232,"score":210,"percentile":233},"2025-12-21",0.79249,{"date":235,"score":210,"percentile":224},"2025-12-22",{"date":237,"score":210,"percentile":238},"2025-12-23",0.7925,{"date":240,"score":210,"percentile":241},"2025-12-24",0.79264,{"date":243,"score":210,"percentile":244},"2025-12-25",0.79285,{"date":246,"score":210,"percentile":247},"2025-12-26",0.79282,{"date":249,"score":210,"percentile":250},"2025-12-27",0.79333,{"date":252,"score":210,"percentile":253},"2025-12-28",0.79271,{"date":255,"score":210,"percentile":256},"2025-12-29",0.79266,{"date":258,"score":210,"percentile":259},"2025-12-30",0.79273,{"date":261,"score":210,"percentile":262},"2025-12-31",0.79289,{"date":264,"score":265,"percentile":266},"2026-01-01",0.00771,0.73124,{"date":268,"score":265,"percentile":266},"2026-01-02",{"date":270,"score":265,"percentile":271},"2026-01-03",0.73123,{"date":273,"score":210,"percentile":274},"2026-01-04",0.7928,{"date":276,"score":210,"percentile":277},"2026-01-05",0.79277,{"date":279,"score":210,"percentile":247},"2026-01-06",{"date":281,"score":210,"percentile":282},"2026-01-07",0.7929,{"date":284,"score":210,"percentile":285},"2026-01-08",0.79299,{"date":287,"score":210,"percentile":288},"2026-01-09",0.79302,{"date":290,"score":210,"percentile":288},"2026-01-10",{"date":292,"score":210,"percentile":293},"2026-01-11",0.79295,{"date":295,"score":210,"percentile":247},"2026-01-12",{"date":297,"score":210,"percentile":298},"2026-01-13",0.79278,{"date":300,"score":210,"percentile":285},"2026-01-14",{"date":302,"score":210,"percentile":303},"2026-01-15",0.79301,{"date":305,"score":210,"percentile":306},"2026-01-16",0.79308,{"date":308,"score":210,"percentile":309},"2026-01-17",0.79318,{"date":311,"score":210,"percentile":312},"2026-01-18",0.79315,{"date":314,"score":210,"percentile":315},"2026-01-19",0.79307,{"date":317,"score":210,"percentile":318},"2026-01-20",0.79306,{"date":320,"score":210,"percentile":321},"2026-01-21",0.79313,{"date":323,"score":210,"percentile":324},"2026-01-22",0.79324,{"date":326,"score":210,"percentile":327},"2026-01-23",0.79351,{"date":329,"score":210,"percentile":330},"2026-01-24",0.79362,{"date":332,"score":210,"percentile":333},"2026-01-25",0.79353,{"date":335,"score":210,"percentile":336},"2026-01-26",0.7935,{"date":338,"score":210,"percentile":339},"2026-01-27",0.79349,{"date":341,"score":210,"percentile":342},"2026-01-28",0.79348,{"date":344,"score":210,"percentile":345},"2026-01-29",0.79346,{"date":347,"score":210,"percentile":339},"2026-01-30",{"date":349,"score":210,"percentile":350},"2026-01-31",0.79354,{"date":352,"score":265,"percentile":353},"2026-02-01",0.73199,[355,360],{"source":57,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":356,"cvss_v4_0":9},{"baseScore":55,"baseSeverity":357,"vectorString":58,"impactScore":358,"exploitabilityScore":359},"HIGH",6,10,{"source":63,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":361,"cvss_v4_0":9},{"baseScore":55,"baseSeverity":357,"vectorString":58,"impactScore":358,"exploitabilityScore":359},[363,381],{"ecosystem":9,"name":364,"vendor":364,"product":364,"cpe_part":365,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":366},"curl","a",[367,372,375,378],{"version":368,"is_range":369,"range_type":57,"version_start":370,"version_start_type":371,"version_end":370,"version_end_type":371,"fixed_in":9},">= 8.8.0, \u003C= 8.8.0",true,"8.8.0","including",{"version":373,"is_range":369,"range_type":57,"version_start":374,"version_start_type":371,"version_end":374,"version_end_type":371,"fixed_in":9},">= 8.7.1, \u003C= 8.7.1","8.7.1",{"version":376,"is_range":369,"range_type":57,"version_start":377,"version_start_type":371,"version_end":377,"version_end_type":371,"fixed_in":9},">= 8.7.0, \u003C= 8.7.0","8.7.0",{"version":379,"is_range":369,"range_type":57,"version_start":380,"version_start_type":371,"version_end":380,"version_end_type":371,"fixed_in":9},">= 8.6.0, \u003C= 8.6.0","8.6.0",{"ecosystem":9,"name":382,"vendor":383,"product":382,"cpe_part":365,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":384},"libcurl","haxx",[385],{"version":386,"is_range":369,"range_type":387,"version_start":380,"version_start_type":371,"version_end":388,"version_end_type":389,"fixed_in":9},"gte8.6.0_lt8.9.0","cpe","8.9.0","excluding"]