CVE Feed

    Dashboard / CVE / CVE-2024-34244

    CVE-2024-34244

    libmodbus v3.1.10 is vulnerable to Buffer Overflow via the modbus_write_bits function. This issue can be triggered when the function is fed with specially crafted input, which leads to out-of-bounds read and can potentially cause a crash or other unintended behaviors.

    Published:May 8, 2024
    Last Modified:May 5, 2025
    EPS:May 8, 2024
    EPSS Score:0.00576
    CVSS Score:7.5

    Affected Products

    Vendor
    Libmodbus
    Product
    Libmodbus

    Exploits

    https://github.com/stephane/libmodbus/issues/743https://github.com/stephane/libmodbus/issues/743

    Related CVEs

    CVE-2024-10918 (CVSS 4.8) — Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer allocated for the…
    CVE-2024-36845 (CVSS 4.3) — An invalid pointer in the modbus_receive() function of libmodbus v3.1.6 allows attackers to cause a Denial of …
    CVE-2024-36844 (CVSS 7.5) — libmodbus v3.1.6 was discovered to contain a use-after-free via the ctx->backend pointer. This vulnerability a…
    CVE-2024-36843 (CVSS 7.5) — libmodbus v3.1.6 was discovered to contain a heap overflow via the modbus_mapping_free() function.…
    CVE-2023-26793 (CVSS 9.8) — libmodbus v3.1.10 has a heap-based buffer overflow vulnerability in read_io_status function in src/modbus.c.…
    CVE-2022-0367 (CVSS 7.8) — A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.…
    CVE-2019-14463 (CVSS 9.1) — An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for t…
    CVE-2019-14462 (CVSS 9.1) — An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for t…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High