Security Advisory

CVE-2023-38128

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-10-19 17:00:42

Last updated 2025-02-13 17:01:45

Assigner talos

CVSS score 7.8

State PUBLISHED

Description

An out-of-bounds write vulnerability exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372. A specially crafted document can cause a type confusion, which can lead to memory corruption and eventually arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

← Browse all CVEs View on cve.org ↗