CVE Feed

    Dashboard / CVE / CVE-2024-36843

    CVE-2024-36843

    libmodbus v3.1.6 was discovered to contain a heap overflow via the modbus_mapping_free() function.

    Published:May 31, 2024
    Last Modified:Nov 3, 2025
    EPS:May 31, 2024
    EPSS Score:0.00483
    CVSS Score:7.5

    Affected Products

    Vendor
    Libmodbus
    Product
    Libmodbus

    Exploits

    https://github.com/balckgu1/libmodbusPoc/blob/main/gdb.mdhttps://github.com/stephane/libmodbus/issues/748https://github.com/balckgu1/libmodbusPoc/blob/main/gdb.mdhttps://github.com/stephane/libmodbus/issues/748

    Common Weakness Enumeration

    CWE-122 Heap-based Buffer Overflow

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2024-10918 (CVSS 4.8) — Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer allocated for the…
    CVE-2024-36845 (CVSS 4.3) — An invalid pointer in the modbus_receive() function of libmodbus v3.1.6 allows attackers to cause a Denial of …
    CVE-2024-36844 (CVSS 7.5) — libmodbus v3.1.6 was discovered to contain a use-after-free via the ctx->backend pointer. This vulnerability a…
    CVE-2024-34244 (CVSS 7.5) — libmodbus v3.1.10 is vulnerable to Buffer Overflow via the modbus_write_bits function. This issue can be trigg…
    CVE-2023-26793 (CVSS 9.8) — libmodbus v3.1.10 has a heap-based buffer overflow vulnerability in read_io_status function in src/modbus.c.…
    CVE-2022-0367 (CVSS 7.8) — A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.…
    CVE-2019-14463 (CVSS 9.1) — An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for t…
    CVE-2019-14462 (CVSS 9.1) — An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for t…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High