CVE Catalog
CVE-2023-40294
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.65%
46th percentile - higher than 46% of all known CVEs
Summary
Version 2.0.8 of the libboron library has a heap-based buffer overflow in the ur_parseBlockI function in i_parse_blk.c.
Risk Assessment
The buffer overflow may lead to unauthorized memory access, posing a risk of executing malicious code.
Recommendation
It is recommended to update the libboron library to the latest version to mitigate this vulnerability.
Original NVD description (English source)
libboron in Boron 2.0.8 has a heap-based buffer overflow in ur_parseBlockI at i_parse_blk.c.