https://vulnerability.circl.lu/sightings/feed 2026-05-28T18:25:15.517685+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/6be9f27b-28ab-4429-b616-252a70fcea88/export 2026-05-28T18:25:15.873416+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6be9f27b-28ab-4429-b616-252a70fcea88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52296", "type": "seen", "source": "https://t.me/cvedetector/10635", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-52296 - libosdp Null Pointer Dereference Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-52296 \nPublished : Nov. 12, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : libosdp is an implementation of IEC 60839-11-5 OSDP (Open Supervised Device Protocol) and provides a C library with support for C++, Rust and Python3. At ospd_common.c, on the osdp_reply_name function, any reply id between REPLY_ACK and REPLY_XRD is valid, but names array do not declare all of the range. On a case of an undefined reply id within the range, name will be null (name = names[reply_id - REPLY_ACK];). Null name will casue a crash on next line: if (name[0] == '\\0') as null[0] is invalid. As this logic is not limited to a secure connection, attacker may trigger this vulnerability without any prior knowledge. This issue is fixed in 2.4.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"12 Nov 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T18:03:06.000000Z"} 2024-11-12T18:03:06+00:00