TROYANOSYVIRUS
← Retour aux CVEs

CVE-2024-36626

MEDIUM
5.3

Description

In prestashop 8.1.4, a NULL pointer dereference was identified in the math_round function within Tools.php.

Details CVE

Score CVSS v3.15.3
SeveriteMEDIUM
Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Vecteur d'attaqueNETWORK
ComplexiteLOW
Privileges requisNONE
Interaction utilisateurNONE
Publie11/29/2024
Derniere modification9/15/2025
Sourcenvd
Observations honeypot0

Produits affectes

prestashop:prestashop

Faiblesses (CWE)

CWE-476

References

https://gist.github.com/1047524396/25c45b61a6374e0fdaf720c9863c6bcd(cve@mitre.org)
https://github.com/PrestaShop/PrestaShop/blob/8.1.4/classes/Tools.php#L1774(cve@mitre.org)
https://github.com/prestashop/prestashop/commit/20fa542294da2cfa034a48041e292acaed0c2a7f(cve@mitre.org)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.