CVE-2024-27094

CVE-2024-27094 is a high-severity vulnerability affecting OpenZeppelin Contracts, specifically the Base64.encode function, which can lead to out-of-bounds reads when processing input not a multiple of 3 bytes. This flaw, rated 7.4 CVSS, allows an unauthenticated attacker to potentially access sensitive memory regions with high impact on confidentiality and availability, though it requires high attack complexity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability. Organizations using affected versions (prior to 5.0.2 and 4.9.6) should prioritize patching.