VULNERABILITY INTELLIGENCE

CVE-2014-9488

CVSS score10 HIGH

EPSS probability3.88%

CISA KEVNot currently listed

Published2015-04-14

Last modified2026-06-17

Description

The is_utf8_well_formed function in GNU less before 475 allows remote attackers to have unspecified impact via malformed UTF-8 characters, which triggers an out-of-bounds read.