CyberRota Analysis
AI-GeneratedCodeMeter Runtime versions prior to 8.41a and 9.10 are vulnerable when configured as a server, as they improperly handle requests with opcode 0x5e due to insufficient bounds checking on the data length. This flaw can result in out-of-bounds reads, leading to segmentation faults and crashes of the runtime environment. Organizations utilizing CodeMeter Runtime in server configurations should prioritize patching to mitigate potential disruptions and security risks.
Original NVD Description
If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and the data itself. Missing bounds checking on the data length value can lead to out of bounds reads, causing a segmentation fault that ultimately crashes the CodeMeter Runtime.