CyberRota Analysis
AI-GeneratedThe vulnerability in hashcat's fgetl() function allows for an out-of-bounds heap write, which occurs when an input line matches the buffer length, potentially leading to memory corruption. This could be exploited by attackers through specially crafted hash files, potfiles, or wordlists, posing a risk of denial of service or arbitrary code execution. Organizations using hashcat for password recovery or cracking should prioritize patching this vulnerability to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
hashcat's fgetl() function in src/filehandling.c writes a null terminator one byte past the caller's buffer when an input line is exactly the buffer length. Attackers can trigger this out-of-bounds heap write by providing a hash file, potfile, or wordlist containing a line of exactly HCBUFSIZ_LARGE bytes.