← Database

CVE-2024-46483

CRITICAL CVSS: 9.8 Published: 2024-10-22 Modified: 2026-06-17

Description

Xlight FTP Server <3.9.4.3 has an integer overflow vulnerability in the packet parsing logic of the SFTP server, which can lead to a heap overflow with attacker-controlled content.

Affected Platforms

Unknown

Weakness Type

CWE-190

References