Overview: 1 vulnerability
| WSA |
CVE |
Score |
Severity |
Issue |
Vulnerability type |
Scope |
Versions |
Fix
| Release date |
|
| WSA-2025-1 |
- |
3.9 |
|
Integer overflow with decimal numbers in calculation of expression. |
Integer Overflow or Wraparound |
Core |
2.7 → 4.6.2 |
4.6.3 |
|
WSA-2025-1: [Core] Integer overflow with decimal numbers in calculation of expression.
Vulnerability
AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C
(
detail)
Integer Overflow or Wraparound
(
detail)
Affected versions
2.7 → 4.6.2
Description
An integer overflow happens when using numbers with 9 or more decimals in calculation of expression, for example:
/eval -n ${calc:0.123456789}.
Mitigation
There is no known mitigation.
The upgrade to the latest stable version is highly recommended.