cve/2023/CVE-2023-49287.md

CVE-2023-49287

Description

TinyDir is a lightweight C directory and file reader. Buffer overflows in the tinydir_file_open() function. This vulnerability has been patched in version 1.2.6.

POC

Reference

• http://packetstormsecurity.com/files/176060/TinyDir-1.2.5-Buffer-Overflow.html
• https://github.com/cxong/tinydir/security/advisories/GHSA-jf5r-wgf4-qhxf

Github

• https://github.com/0xdea/advisories
• https://github.com/ShangzhiXu/CSABlindSpot
• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/hnsecurity/vulns