Wind River Support Network

HomeDefectsLIN1023-3726

Fixed

LIN1023-3726 : Security Advisory - python3-cbor2 - CVE-2024-26134

Created: Feb 20, 2024 Updated: Jul 27, 2025

Resolved Date: Jul 27, 2025

Found In Version: 10.23.30.1

Severity: Standard

Applicable for: Wind River Linux LTS 23

Component/s: Userspace

Description

cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Starting in version 5.5.1 and prior to version 5.6.2, an attacker can crash a service using cbor2 to parse a CBOR binary by sending a long enough object. Version 5.6.2 contains a patch for this issue.

CREATE(Triage):(User=admin) CVE-2024-26134 (https://nvd.nist.gov/vuln/detail/CVE-2024-26134)