{"id":"CVE-2024-25817","aliases":["GHSA-3qx3-6hxr-j2ch"],"url":"https://o3.security/vulnerability/CVE-2024-25817","summary":"eza Potential Heap Overflow Vulnerability for AArch64","details":"Buffer Overflow vulnerability in eza before version 0.18.2, allows local attackers to execute arbitrary code via the .git/HEAD, .git/refs, and .git/objects components.","published":"2024-03-06T00:15:52.703Z","modified":"2026-03-13T22:00:51.391389Z","cvss":{"score":7.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"crates.io","name":"eza","fixedVersion":"0.18.2"}],"fix":null,"references":[{"type":"FIX","url":"https://github.com/advisories/GHSA-3qx3-6hxr-j2ch"},{"type":"ARTICLE","url":"https://www.cubeyond.net/blog/my-cves/eza-cve-report"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-03-13T22:00:51.391389Z"}}