CVE-2024-10918

MEDIUM

libmodbus 3.1.10 - Stack-based Buffer Overflow via Modbus Response Handling

Title source: llm

Description

Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer allocated for the Modbus response if the function tries to reply to a Modbus request with an unexpected length.

References (2)

Core 2

Core References

Mailing List

https://lists.debian.org/debian-lts-announce/2025/03/msg00010.html

Third Party Advisory

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-10918

Scores

CVSS v3 4.8

EPSS 0.0039

EPSS Percentile 31.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-121 CWE-787

Status published

Products (1)

libmodbus/libmodbus 3.1.10

Published Feb 27, 2025

Tracked Since Feb 18, 2026