{"id":"CVE-2023-52267","details":"ehttp 1.0.6 before 17405b9 has a simple_log.cpp _log out-of-bounds-read during error logging for long strings.","modified":"2026-08-12T14:51:52.517288Z","published":"2023-12-30T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52267.json","unresolved_ranges":[{"extracted_events":[{"introduced":"1.0.6"},{"fixed":"17405b9"}],"source":"DESCRIPTION"}]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52267.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52267"},{"type":"REPORT","url":"https://github.com/hongliuliao/ehttp/issues/38"},{"type":"FIX","url":"https://github.com/hongliuliao/ehttp/commit/17405b975948abc216f6a085d2d027ec1cfd5766"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/hongliuliao/ehttp","events":[{"introduced":"fecabdc4a01897c126df324fc001b57bf8e94ef5"},{"fixed":"17405b975948abc216f6a085d2d027ec1cfd5766"}],"database_specific":{"cpe":"cpe:2.3:a:hongliuliao:ehttp:1.0.6:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.0.6"},{"last_affected":"1.0.6"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["1.0.6"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52267.json","vanir_signatures_modified":"2026-08-12T14:51:52Z","vanir_signatures":[{"source":"https://github.com/hongliuliao/ehttp/commit/17405b975948abc216f6a085d2d027ec1cfd5766","target":{"file":"src/sim_parser.cpp","function":"Request::parse_request"},"deprecated":false,"digest":{"function_hash":"73602595406765603495895243458529999594","length":736},"id":"CVE-2023-52267-4a636073","signature_type":"Function","signature_version":"v1"},{"target":{"file":"src/epoll_socket.cpp","function":"EpollSocket::handle_readable_event"},"deprecated":false,"digest":{"function_hash":"93877066501049313000888507392004009704","length":677},"id":"CVE-2023-52267-8d009e71","signature_type":"Function","signature_version":"v1","source":"https://github.com/hongliuliao/ehttp/commit/17405b975948abc216f6a085d2d027ec1cfd5766"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/hongliuliao/ehttp/commit/17405b975948abc216f6a085d2d027ec1cfd5766","target":{"file":"src/sim_parser.cpp"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["97078807774778642258282973658459630335","338064464938120916455642639290206514037","274913430948339487223909751919153920503","152853396008199110312237658894110687106"]},"id":"CVE-2023-52267-a66d2add"},{"digest":{"function_hash":"31465679358294368451393686241417280189","length":256},"id":"CVE-2023-52267-bcea52ce","signature_type":"Function","signature_version":"v1","source":"https://github.com/hongliuliao/ehttp/commit/17405b975948abc216f6a085d2d027ec1cfd5766","target":{"file":"src/epoll_socket.cpp","function":"read_func"},"deprecated":false},{"target":{"file":"src/epoll_socket.cpp"},"deprecated":false,"digest":{"line_hashes":["329241973833385240603699716665315814897","112175492930112887238917383991016779289","288691531011773280941275128769726435664","253932568007561709924862045390154546888","90885647615834147087855771394769476914","20238336541240907050694021874287316153","85229494304821332111168579485102171358","18689021168757126544170751874331136107","133910018089163050764349913131236699907","16216665604355755383291786654020254619","302957446397306479393092314695632629083"],"threshold":0.9},"id":"CVE-2023-52267-d4e314c9","signature_type":"Line","signature_version":"v1","source":"https://github.com/hongliuliao/ehttp/commit/17405b975948abc216f6a085d2d027ec1cfd5766"}]}}],"schema_version":"1.9.0"}