What is GHSA-4m2v-5c2p-cp8g?

GHSA-4m2v-5c2p-cp8g is a security advisory published by GitHub Security Advisories with High severity. An out of bounds read due to improper input validation when loading the font table in fontmgr.cpp...

Which CVE IDs does GHSA-4m2v-5c2p-cp8g cover?

GHSA-4m2v-5c2p-cp8g covers the following CVE IDs: CVE-2024-10495. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4m2v-5c2p-cp8g?

GHSA-4m2v-5c2p-cp8g has a CVSS v3 base score of 7.8, published by GitHub Security Advisories.

GHSA-4m2v-5c2p-cp8gHighCVSS 7.8

An out of bounds read due to improper input validation when loading the font table in fontmgr.cpp...

Vendor

GitHub Security Advisories

Published

December 10, 2024

Last Modified

November 6, 2026

🔗 CVE IDs covered (1)

CVE-2024-10495 →

📋 Description

An out of bounds read due to improper input validation when loading the font table in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q3 and prior versions.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2024-10495
https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/out-of-bounds-read-vulnerabilities-in-ni-labview-.html
https://github.com/advisories/GHSA-4m2v-5c2p-cp8g