vulnerability
Amazon Linux 2023: CVE-2024-50610: Low priority package update for gsl
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 3 | (AV:L/AC:M/Au:S/C:N/I:P/A:P) | Oct 27, 2024 | Feb 26, 2025 | Jul 7, 2025 |
Severity
3
CVSS
(AV:L/AC:M/Au:S/C:N/I:P/A:P)
Published
Oct 27, 2024
Added
Feb 26, 2025
Modified
Jul 7, 2025
Description
GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When params.n_tries is negative, incorrect memory allocation occurs.
A flaw was found in the GNU Scientific Library (GSL). A specially-crafted payload can trigger incorrect memory allocation, which can lead to memory corruption or an application crash.
A flaw was found in the GNU Scientific Library (GSL). A specially-crafted payload can trigger incorrect memory allocation, which can lead to memory corruption or an application crash.
Solutions
amazon-linux-2023-upgrade-gslamazon-linux-2023-upgrade-gsl-debuginfoamazon-linux-2023-upgrade-gsl-debugsourceamazon-linux-2023-upgrade-gsl-devel
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.