CVE-2024-8948

CVE-2024-8948 is a critical heap-based buffer overflow vulnerability affecting MicroPython version 1.23.0, specifically within the mpz_as_bytes function when converting zero from an integer to bytes. This flaw can be exploited remotely with low attack complexity, potentially leading to a denial of service (DoS) due to the high impact on availability. While a patch (908ab1ceca15ee6fd0ef82ca4cba770a3ec41894) is available and recommended, there is currently no evidence of active exploitation, nor are there publicly available exploits in common frameworks or significant community discussion surrounding this CVE.