CVE-2024-57823

critical · 9.3

In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptor_uri_normalize_path().

9.3

CVSS

0.3%

EPSS (exploit prob.)

25th

EPSS percentile

2025-01-10

Published

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-191

Affected products

Vendor	Product	Affected versions
librdf	raptor_rdf_syntax_library	<= 2.0.16

Check a specific version with /api/v1/cve/match.

References

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067896
https://github.com/dajobe/raptor/issues/70
https://github.com/pedrib/PoC/blob/master/fuzzing/raptor-fuzz.md
https://lists.debian.org/debian-lts-announce/2025/10/msg00023.html

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-57823