Microsoft Security Response Center guidance
Vendor revision: Aug 17, 2026CBL-Mariner Releases
Vendor-listed releases
- 10.11.6-3
Vulnerability intelligence
CVE-2024-0901 and is rated Critical severity with a CVSS score of 9.1. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
CBL-Mariner Releases
Vendor-listed releases
Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of bounds read via sending a malformed packet with the correct length.
Source: NVD