Buffer Overflow Vulnerability in Resource Hacker

INCIBE has coordinated the publication of 1 high severity vulnerability affecting Resource Hacker version 3.6.0.92, a resource editor for 32-bit and 64-bit Windows applications developed by Angus Johnson, which has been discovered by Rafael Pedrero.

This vulnerability has been assigned the following code, CVSS v3.1 base score, CVSS vector and vulnerability type CWE:

• CVE-2024-1112: 7.3 | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H | CWE-119.