TROYANOSYVIRUS
← Voltar para CVEs

CVE-2024-36626

MEDIUM
5.3

Descricao

In prestashop 8.1.4, a NULL pointer dereference was identified in the math_round function within Tools.php.

Detalhes CVE

Pontuacao CVSS v3.15.3
SeveridadeMEDIUM
Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Vetor de ataqueNETWORK
ComplexidadeLOW
Privilegios necessariosNONE
Interacao do usuarioNONE
Publicado11/29/2024
Ultima modificacao9/15/2025
Fontenvd
Avistamentos honeypot0

Produtos afetados

prestashop:prestashop

Fraquezas (CWE)

CWE-476

Referencias

https://gist.github.com/1047524396/25c45b61a6374e0fdaf720c9863c6bcd(cve@mitre.org)
https://github.com/PrestaShop/PrestaShop/blob/8.1.4/classes/Tools.php#L1774(cve@mitre.org)
https://github.com/prestashop/prestashop/commit/20fa542294da2cfa034a48041e292acaed0c2a7f(cve@mitre.org)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.