CVE-2023-1709 — Stack-based Buffer Overflow in Library Apdfl

CWE-121 — Stack-based Buffer OverflowCWE-787 — Out-of-bounds WriteCWE-190 — Integer Overflow or Wraparound5 documents5 sources
Severity
7.8HIGHNVD
EPSS
0.1%
top 77.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Siemens Jt2goSiemens Teamcenter VisualizationDatalogics Library Apdfl
Timeline
PublishedJun 7

Description

Datalogics Library APDFLThe v18.0.4PlusP1e and prior contains a stack-based buffer overflow due to documents containing corrupted fonts, which could allow an attack that causes an unhandled crash during the rendering process.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages5 packages

▶CVEListV5datalogics/library_apdflv18.0.4PlusP1e
▶CVEListV5siemens/jt2go< 14.2.0.2
▶NVDsiemens/jt2go< 14.2.0.2
▶CVEListV5siemens/teamcenter_visualization13.2 — 13.2.0.13+4
▶NVDsiemens/teamcenter_visualization13.2.0 — 13.2.0.13+4

🔴Vulnerability Details

2
GHSA
GHSA-hfx6-59cf-wmqp: The APDFL↗2023-06-07
▶
CVEList
Datalogics Library APDFL Stack-based Buffer Overflow↗2023-06-07
▶

🕵️Threat Intelligence

1
Talos
Vulnerability Spotlight: Specially crafted files could lead to denial of service, information disclosure in OpenImageIO parser↗2023-03-30
▶
CVE-2023-1709 — Stack-based Buffer Overflow | cvebase