CVE Feed

    Dashboard / CVE / CVE-2024-10918

    CVE-2024-10918

    Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer allocated for the Modbus response if the function tries to reply to a Modbus request with an unexpected length.

    Published:Feb 27, 2025
    Last Modified:Nov 3, 2025
    EPS:Feb 27, 2025
    EPSS Score:0.00109
    CVSS Score:4.8

    Affected Products

    Vendor
    Libmodbus
    Product
    Libmodbus

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2024-36845 (CVSS 4.3) — An invalid pointer in the modbus_receive() function of libmodbus v3.1.6 allows attackers to cause a Denial of …
    CVE-2024-36844 (CVSS 7.5) — libmodbus v3.1.6 was discovered to contain a use-after-free via the ctx->backend pointer. This vulnerability a…
    CVE-2024-36843 (CVSS 7.5) — libmodbus v3.1.6 was discovered to contain a heap overflow via the modbus_mapping_free() function.…
    CVE-2024-34244 (CVSS 7.5) — libmodbus v3.1.10 is vulnerable to Buffer Overflow via the modbus_write_bits function. This issue can be trigg…
    CVE-2023-26793 (CVSS 9.8) — libmodbus v3.1.10 has a heap-based buffer overflow vulnerability in read_io_status function in src/modbus.c.…
    CVE-2022-0367 (CVSS 7.8) — A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.…
    CVE-2019-14463 (CVSS 9.1) — An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for t…
    CVE-2019-14462 (CVSS 9.1) — An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for t…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High