TROYANOSYVIRUS
← Volver a CVEs

CVE-2024-36626

MEDIUM
5.3

Descripcion

In prestashop 8.1.4, a NULL pointer dereference was identified in the math_round function within Tools.php.

Detalles CVE

Puntuacion CVSS v3.15.3
SeveridadMEDIUM
Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Vector de ataqueNETWORK
ComplejidadLOW
Privilegios requeridosNONE
Interaccion usuarioNONE
Publicado11/29/2024
Ultima modificacion9/15/2025
Fuentenvd
Avistamientos honeypot0

Productos afectados

prestashop:prestashop

Debilidades (CWE)

CWE-476

Referencias

https://gist.github.com/1047524396/25c45b61a6374e0fdaf720c9863c6bcd(cve@mitre.org)
https://github.com/PrestaShop/PrestaShop/blob/8.1.4/classes/Tools.php#L1774(cve@mitre.org)
https://github.com/prestashop/prestashop/commit/20fa542294da2cfa034a48041e292acaed0c2a7f(cve@mitre.org)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.