CVE-2024-13941

A vulnerability was found in ouch-org ouch up to 0.3.1. It has been classified as critical. This affects the function ouch::archive::zip::convert_zip_date_time of the file zip.rs. The manipulation of the argument month leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 0.4.0 is able to address this issue. It is recommended to upgrade the affected component.

• CWE-119

• https://github.com/ouch-org/ouch/issues/707
• https://github.com/ouch-org/ouch/releases/tag/0.4.0
• https://github.com/rustsec/advisory-db/pull/2084/files
• https://github.com/user-attachments/files/16767988/ouch.crash.report.docx
• https://vuldb.com/?ctiid.302055
• https://vuldb.com/?id.302055
• https://vuldb.com/?submit.524511
• https://github.com/ouch-org/ouch/issues/707

Published

Apr 1, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-13930An Unchecked Loop Condition in ASPECT provides an attacker t…5.9
• CVE-2024-13931Relative Path Traversal vulnerabilities in ASPECT allow acce…7.5
• CVE-2024-13933The FoodBakery | Delivery Restaurant Directory WordPress The…8.8
• CVE-2024-13939String::Compare::ConstantTime for Perl through 0.321 is vuln…7.5
• CVE-2024-1394A memory leak flaw was found in Golang in the RSA encrypting…7.5
• CVE-2024-13940The Ninja Forms Webhooks plugin for WordPress is vulnerable …5.5
• CVE-2024-13943Tesla Model S Iris Modem QCMAP_ConnectionManager Improper In…7.8
• CVE-2024-13944Link Following Local Privilege Escalation Vulnerability in N…7.8
• CVE-2024-13945Stored Absolute Path Traversal vulnerabilities in ASPECT cou…8.4
• CVE-2024-13946DLL's are not digitally signed when loaded in ASPECT's confi…7.1
• CVE-2024-13947Device commissioning parameters in ASPECT may be modified by…7.1
• CVE-2024-13948Windows permissions for ASPECT configuration toolsets are no…7.3