CVE Catalog
CVE-2023-40305
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.42%
34th percentile - higher than 34% of all known CVEs
Summary
GNU indent version 2.2.13 has a heap-based buffer overflow vulnerability in the search_brace function in indent.c, which can be exploited via a crafted file.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized memory access, potentially resulting in arbitrary code execution or application crashes.
Recommendation
It is recommended to update to the latest version of GNU indent to mitigate this vulnerability and to monitor systems for potential exploitation attempts.
Original NVD description (English source)
GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.

