QwikSec

Security Database

CVE

CWE

Training

CVE-2023-46046

Published: Mar 27, 2024

Modified: Nov 4, 2025

PUBLISHED

Description

An issue in MiniZinc before 2.8.0 allows a NULL pointer dereference via ti_expr in a crafted .mzn file. NOTE: this is disputed because there is no common libminizinc use case in which an unattended process is supposed to run forever to process a series of atttacker-controlled .mzn files.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/MiniZinc/libminizinc/issues/730

20240126 null pointer deference in MiniZinc via a crafted .mzn file

mailing-list

https://www.minizinc.org/doc-2.8.3/en/changelog.html

https://github.com/MiniZinc/libminizinc/commit/afe67acc20898e4308044b54c4acf7a08df544f0

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.