Description
Fathom 2.4 contains a buffer overflow vulnerability in the Authorization Code field that allows local attackers to crash the application by submitting an oversized input string. Attackers can paste a 6000-byte payload into the Authorization Code field and click Activate to trigger a denial of service condition.
CVSS 5.5EPSS 0.13%Risk 0.56
View source- Published
- 2026-04-26 22:17:29
- Affected versions
- ==2.4
- Type
- Installed app
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H