CVE-2024-10918

MediumCVSS 4.8

Published: 27/02/2025(UTC)Updated: 01/08/2026(UTC)Translated: 02/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

34th percentile - higher than 34% of all known CVEs

Summary

Stack-based Buffer Overflow in libmodbus v3.1.10 allows overflow of the buffer allocated for Modbus response if the function tries to reply to a request with unexpected length.

Risk Assessment

An attacker can cause system crashes or potentially execute arbitrary code, threatening the stability and security of industrial systems.

Recommendation

Update libmodbus to version 3.1.11 or later.

Original NVD description (English source)

Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer allocated for the Modbus response if the function tries to reply to a Modbus request with an unexpected length.