CVE-2024-36626 - In prestashop 8.1.4, a NULL pointer dereference was identified in the math_round function within Tools.php

MEDIUM

In prestashop 8.1.4, a NULL pointer dereference was identified in the math_round function within Tools.php

Published Nov 29, 2024

5.3

MEDIUM

CVSS 3.1

EPSS 0.66%

In prestashop 8.1.4, a NULL pointer dereference was identified in the math_round function within Tools.php.

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Prestashop	Prestashop	unknown	Affected 8.1.4

No remediation recorded yet.

Weaknesses (1)

CWE-476

NULL Pointer Dereference

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-36165		Advisory
https://gist.github.com/1047524396/25c45b61a6374e0fdaf720c9863c6bcd		Third Party Advisory
https://github.com/PrestaShop/PrestaShop/blob/8.1.4/classes/Tools.php#L1774		Product
https://github.com/prestashop/prestashop/commit/20fa542294da2cfa034a48041e292acaed0c2a7f		Patch

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 29, 2024

Updated Nov 29, 2024

Reserved May 30, 2024

CISA Vulnrichment

Updated Nov 29, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Nov 29, 2024

Updated Nov 29, 2024

GitHub

No data