VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Mar 20, 2025· Updated Jun 17, 2026

CVE-2024-12387

CVE-2024-12387

Description

A vulnerability in the binary-husky/gpt_academic repository, as of commit git 3890467, allows an attacker to crash the server by uploading a specially crafted zip bomb. The server decompresses the uploaded file and attempts to load it into memory, which can lead to an out-of-memory crash. This issue arises due to improper input validation when handling compressed file uploads.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Binary Husky/Gpt Academic2 versions
    cpe:2.3:a:binary-husky:gpt_academic:2024-10-15:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:binary-husky:gpt_academic:2024-10-15:*:*:*:*:*:*:*
    • (no CPE)range: commit git 3890467
  • binary-husky/binary-husky/gpt_academicv5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.