CVE-2023-46046
Medium
Description
An issue in MiniZinc before 2.8.0 allows a NULL pointer dereference via ti_expr in a crafted .mzn file. NOTE: this is disputed because there is no common libminizinc use case in which an unattended process is supposed to run forever to process a series of atttacker-controlled .mzn files.
SeverityMedium
CVSS5.5
Exploit probability—
ProductMiniZinc
PublishedMar 27, 2024
First seenMar 27, 2024
Weakness typeCWE-476NULL pointer dereference
How to fix
Update
- MiniZinc2.8.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| MiniZinc | No range specified | 2.8.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.