CVE-2024-8375

CVE-2024-8375 is a use-after-free vulnerability in Google Reverb, specifically affecting its handling of the VARIANT datatype during tensor unpacking. An attacker can craft malicious tensor data via the InsertStream gRPC endpoint, which, when subsequently processed by a client calling SampleStream, overwrites vtable pointers in pre-allocated memory. This allows an attacker to gain control of the Program Counter when any method or destructor of the affected object is called. Rated with a CVSS score of 7.8 (HIGH), the vulnerability has a low attack complexity and requires user interaction (UI:R), but does not require privileges (PR:N). Successful exploitation can lead to high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). The recommended mitigation is to upgrade Reverb to a version past git commit 6a0dcf4c9e842b7f999912f792aaa6f6bd261a25. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, which is typical for a significant percentage of vulnerabilities.