Approved changes feed: RSS · Atom

cpe:2.3:a:datadog:dd-trace-cpp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDatadog (8c31a62c-edda-5c02-83f1-ebdd4906350f)
ProductDd Trace Cpp (66585e24-a438-5648-8eda-78a535a477cd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-38525 vulnerable 2026-06-08 06:41:47.629463 dd-trace-cpp malformed unicode header values may cause crash
HIGH (7.5)
dd-trace-cpp is the Datadog distributed tracing for C++. When the library fails to extract trace context due to malformed unicode, it logs the list of audited headers and their values using the `nlohmann` JSON library. However, due to the way the JSON library is invoked, it throws an uncaught exception, which results in a crash. This vulnerability has been patched in version 0.2.2.
Published: 2024-06-28T21:10:57.138Z
Updated: 2024-08-02T04:12:25.118Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.