CVE-2024-53309

MEDIUM EPSS 15.7%

Published Feb 13, 20251y ago · Modified Jun 17, 20261w ago

5.5 CVSS 3.1

Medium

Published Feb 13, 2025 1y ago

Last Modified Jun 17, 2026 1w ago

Description

A stack-based buffer overflow vulnerability exists in Effectmatrix Total Video Converter Command Line (TVCC) 2.50 when an overly long string is passed to the "-f" parameter. This can lead to memory corruption, potentially allowing arbitrary code execution or causing a denial of service via specially crafted input.

CVSS Details

Base Score

5.5

Exploitability

2.1

Impact

3.4

Vector string

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Attack Vector Network

Attack Complexity Low

Privileges Required Low

User Interaction Required

Scope Unchanged

Confidentiality Low

Integrity Low

Availability Low

Threat Intelligence

EPSS Exploit Probability

15.7% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-121

References 1

github.com https://github.com/ufist/vulnerability-research/blob/main/CVE-2024-53309/CVE-2024-53309.md

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.