Log in Start free

Vulnerability · Published Feb 5, 2024 · Assigned by mitre

CVE-2024-24258

High 7.5

In plain English

A high-severity memory leak in the freeglut package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 67% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)1.1%top 33.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8freeglut3.0.0-9.el8ALSA-2024:3120
AlmaLinux:9freeglut3.2.1-10.el9ALSA-2024:2366
AlmaLinux:8freeglut-devel3.0.0-9.el8ALSA-2024:3120
AlmaLinux:9freeglut-devel3.2.1-10.el9ALSA-2024:2366
Debian:12freeglutno fix listedDEBIAN-CVE-2024-24258
Debian:13freeglutno fix listedDEBIAN-CVE-2024-24258
Debian:14freeglutno fix listedDEBIAN-CVE-2024-24258
Rocky Linux:8freeglut0:3.0.0-9.el8RLSA-2024:3120
Rocky Linux:9freeglut0:3.2.1-10.el9RLSA-2024:2366
Ubuntu:25.10freeglut3.4.0-5ubuntu0.1UBUNTU-CVE-2024-24258
Ubuntu:25.10freeglut3.4.0-5ubuntu0.1USN-7870-1
Ubuntu:26.04:LTSfreeglutno fix listedUBUNTU-CVE-2024-24258
Ubuntu:26.10freeglutno fix listedUBUNTU-CVE-2024-24258
Ubuntu:25.10mupdfno fix listedUBUNTU-CVE-2024-24258
Ubuntu:26.04:LTSmupdfno fix listedUBUNTU-CVE-2024-24258
Ubuntu:26.10mupdfno fix listedUBUNTU-CVE-2024-24258

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

Weakness: CWE-401 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References