VULNERABILITY INTELLIGENCE

CVE-2024-50610

CVSS score3.6 LOW
EPSS probability0.28%
CISA KEVNot currently listed
Published2024-10-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L

Description

GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs.

Weakness classification

  • CWE-190: Integer Overflow or Wraparound

Primary references