The vulnerability identified as CVE-2024-37676 affects htop version 2.20. It involves an out-of-bounds access issue in the Header_populateFromSettings function, which can be exploited by a local attacker. The CVSS 3.1 base score is 8.4, indicating a high severity with attack vector local, low attack complexity, no privileges required, no user interaction, and impacts to confidentiality, integrity, and availability. The weakness relates to improper bounds checking (CWE-119) and out-of-bounds write (CWE-787). No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this vulnerability allows a local attacker to cause out-of-bounds memory access, potentially leading to arbitrary code execution or denial of service. The CVSS score reflects high impact on confidentiality, integrity, and availability, meaning sensitive information could be disclosed or altered, and system stability could be compromised.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for unusual behavior related to htop usage. Avoid running htop with elevated privileges if possible.