Threats tagged 'ghsa-cvc4-pw4g-cgpc'

A vulnerability in polkit's authentication agent helper causes an integer underflow when processing input starting with a null byte, leading to an out-of-bounds memory read. This flaw can be triggered by a local or adjacent low-privileged user supplying crafted input, potentially causing the affected application to crash and resulting in a denial of service. No information disclosure or integrity impact has been observed. The issue is rated as low severity.