Overview: 1 vulnerability

WSA CVE Score Severity Issue Vulnerability type Scope Versions Fix Release date
WSA-2025-2 - 3.9
Integer overflow in base32 decode/encode functions. Integer Overflow or Wraparound Core 2.4 → 4.6.2 4.6.3

WSA-2025-2: [Core] Integer overflow in base32 decode/encode functions.

Vulnerability
CVE
Not available
CVSS vector
AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C (detail)
CVSS score
3.9 / 10
Severity
medium
Vulnerability type
Integer Overflow or Wraparound (detail)
Scope
Core
Affected versions
2.4 → 4.6.2
Fixed version
4.6.3 () - ChangeLog
Tracker
Not available
Commits
Description
An integer overflow may happen in base32 encode/decode functions.
Mitigation
There is no known mitigation.
The upgrade to the latest stable version is highly recommended.