CVE Catalog
CVE-2023-40295
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.74%
50th percentile - higher than 50% of all known CVEs
Summary
In version 2.0.8 of the libboron library, there is a heap-based buffer overflow in the ur_strInitUtf8 function in string.c.
Risk Assessment
The buffer overflow may lead to the execution of malicious code, posing a serious security threat to applications using this library.
Recommendation
It is recommended to update the libboron library to the latest version to mitigate this vulnerability.
Other vulnerabilities in libboron
Original NVD description (English source)
libboron in Boron 2.0.8 has a heap-based buffer overflow in ur_strInitUtf8 at string.c.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS