VULNERABILITY INTELLIGENCE
CVE-2023-46046
CVSS score5.5 MEDIUM
EPSS probability0.28%
CISA KEVNot currently listed
Published2024-03-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
An issue in MiniZinc before 2.8.0 allows a NULL pointer dereference via ti_expr in a crafted .mzn file. NOTE: this is disputed because there is no common libminizinc use case in which an unattended process is supposed to run forever to process a series of atttacker-controlled .mzn files.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-476