CVE-2024-38375 — MEDIUM (5.3)

Vulnerability Description

@fastly/js-compute is a JavaScript SDK and runtime for building Fastly Compute applications. The implementation of several functions were determined to include a use-after-free bug. This bug could allow for unintended data loss if the result of the preceding functions were sent anywhere else, and often results in a guest trap causing services to return a 500. This bug has been fixed in version 3.16.0 of the `@fastly/js-compute` package.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:H

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

LOW

Integrity

LOW

Availability

HIGH

Related Weaknesses (CWE)

CWE-416

References

FAQ

What is CVE-2024-38375?

CVE-2024-38375 is a vulnerability with a CVSS score of 5.3 (MEDIUM). @fastly/js-compute is a JavaScript SDK and runtime for building Fastly Compute applications. The implementation of several functions were determined to include a use-after-free bug. This bug could all...

How severe is CVE-2024-38375?

CVE-2024-38375 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-38375?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.