CVE-2024-34403: Fedoraproject Fedora

Medium severity, CVSS 5.9. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.

Affected products

• Fedoraproject Fedora: version 38 only; version 39 only; version 40 only
• Uriparser Project Uriparser: up to and including 0.9.7

Published 2024-05-03. Last modified 2026-06-17.