CVE-2024-49838 – Apache OCI Image Entity Information Disclosure Vulnerability
The following table lists the changes that have been made to the CVE-2024-49838 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics.
-
New CVE Received by [email protected]
Feb. 03, 2025
Action Type Old Value New Value Added Description Information disclosure while parsing the OCI IE with invalid length. Added CVSS V3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L Added CWE CWE-126 Added Reference https://docs.qualcomm.com/product/publicresources/securitybulletin/february-2025-bulletin.html