CVE-2024-10918 — Stack-based Buffer Overflow in Libmodbus

CWE-121 — Stack-based Buffer OverflowCWE-787 — Out-of-bounds WriteCWE-276 — Incorrect Default Permissions5 documents5 sources
Severity
9.8CRITICALNVD
EPSS
0.1%
top 74.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
LibmodbusDebian Libmodbus
Timeline
PublishedFeb 27
Latest updateNov 11

Description

Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer allocated for the Modbus response if the function tries to reply to a Modbus request with an unexpected length.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages4 packages

▶debiandebian/libmodbus< libmodbus 3.1.6-2+deb11u1 (bullseye)
▶Debianlibmodbus/libmodbus< 3.1.6-2+deb11u1+2
▶CVEListV5libmodbus/libmodbus3.1.10

🔴Vulnerability Details

2
GHSA
GHSA-96xh-5wq4-m4cc: Stack-based Buffer Overflow vulnerability in libmodbus v3↗2025-02-27
▶
OSV
CVE-2024-10918: Stack-based Buffer Overflow vulnerability in libmodbus v3↗2025-02-27
▶

📋Vendor Advisories

2
Ivanti
Ivanti Security Advisory: CVE-2025-10918↗2025-11-11
▶
Debian
CVE-2024-10918: libmodbus - Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflo...↗2024
▶
CVE-2024-10918 — Stack-based Buffer Overflow | cvebase