CVE-2023-40296

HighCVSS 7.5

Published: 14/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.72%

49th percentile - higher than 49% of all known CVEs

Summary

Versions of async-sockets-cpp up to 0.3.1 have a stack-based buffer overflow in the ReceiveFrom and Receive functions in udpsocket.hpp when processing malformed UDP packets.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized memory access, potentially resulting in application crashes or execution of malicious code.

Recommendation

It is recommended to upgrade to the latest version of async-sockets-cpp to mitigate this vulnerability.

Other vulnerabilities in async-sockets-cpp

CVE-2023-38632Critical
Versions of async-sockets-cpp up to 0.3.1 have a stack-based buffer overflow in tcpsocket.hpp when processing malformed TCP packets.

Original NVD description (English source)

async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in ReceiveFrom and Receive in udpsocket.hpp when processing malformed UDP packets.