{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-09T17:22:31.374","vulnerabilities":[{"cve":{"id":"CVE-2024-55884","sourceIdentifier":"cve@mitre.org","published":"2024-12-12T02:08:23.127","lastModified":"2026-06-17T08:11:24.230","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"In the Mullvad VPN client 2024.6 (Desktop), 2024.8 (iOS), and 2024.8-beta1 (Android), the exception-handling alternate stack can be exhausted, leading to heap-based out-of-bounds writes in enable() in exception_logging/unix.rs, aka MLLVD-CR-24-01. NOTE: achieving code execution is considered non-trivial."},{"lang":"es","value":"En Mullvad VPN client 2024.6 (Escritorio), 2024.8 (iOS) y 2024.8-beta1 (Android), la pila alternativa de manejo de excepciones se puede agotar, lo que genera escrituras fuera de los límites basadas en el montón en enable() en exception_logging/unix.rs, también conocido como MLLVD-CR-24-01. NOTA: lograr la ejecución del código se considera no trivial."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"cve@mitre.org","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":9.0,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-12-12T16:15:36.813815Z","id":"CVE-2024-55884","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-787"}]}],"references":[{"url":"https://github.com/mullvad/mullvadvpn-app/commit/ef6c862071b26023802b00d6e1dc6ca53d1ab3e6","source":"cve@mitre.org"},{"url":"https://news.ycombinator.com/item?id=42390768","source":"cve@mitre.org"},{"url":"https://x41-dsec.de/news/2024/12/11/mullvad/","source":"cve@mitre.org"}]}}]}