CyberRota Analysis
AI-GeneratedMicrosoft AVML versions prior to 0.17.0 are vulnerable to a symlink attack that allows an attacker to truncate or overwrite the target of the symlink when opening a destination output path on Unix systems. This vulnerability can lead to data loss or corruption due to the truncation occurring before input validation is fully completed. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Microsoft AVML before 0.17.0 could follow a symlink when opening a destination output path on Unix, allowing truncation/overwrite of the symlink target. The destructive effect is performed at open-time via O_TRUNC, and can happen before full input validation completes (“truncation-before-validation”).