CyberRota Analysis
AI-GeneratedThe factorial operator in NCalc versions prior to 6.1.1 is vulnerable to specially crafted expressions that can lead to excessive CPU consumption or non-terminating loops due to integer overflow. This vulnerability poses a risk primarily to applications that evaluate untrusted expressions, potentially impacting performance and availability. Developers and organizations using NCalc should prioritize upgrading to version 6.1.1 to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
NCalc is a fast, lightweight expression evaluator for .NET. Prior to 6.1.1, the factorial operator implementation in src/NCalc.Core/Helpers/MathHelper.cs permits specially crafted expressions with extremely large factorial operands, causing excessive CPU consumption or a non-terminating loop due to integer overflow in the factorial calculation logic when applications evaluate untrusted expressions. This issue is fixed in version 6.1.1.