CVE-2023-49287

TinyDir is a lightweight C directory and file reader. Buffer overflows in the `tinydir_file_open()` function. This vulnerability has been patched in version 1.2.6.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1

7.7 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS

1.87% chance of exploitation in the next 30 days, 78th percentile

Published

2023-12-04

Updated

2025-05-29

Proof-of-concept exploits (2)

• http://packetstormsecurity.com/files/176060/TinyDir-1.2.5-Buffer-Overflow.html
• cxong/tinydir/security/advisories/GHSA-jf5r-wgf4-qhxf

References

• CVE Record
• NVD entry

Related

• CVE-2023-4928
• CVE-2023-49290
• CVE-2023-49276
• CVE-2023-49291
• CVE-2023-49275
• CVE-2023-49293