Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Afl++ Project records in CISA KEVNo Afl++ Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 67
In AFL++ 4.05c, the CmpLog component uses the current working directory to resolve and execute unprefixed fuzzing targets, allowing code execution.
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00403 · Published 2023-02-21 · No fix listed CWE-427
