CVE-2023-43688

HighCVSS 7.5

Published: 09/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

A heap buffer overflow exists in various buffer encryption utilities in Malwarebytes 4.x and 5.x (and Nebula from 2020-10-21 onward).

Risk Assessment

An attacker could cause application crashes or potentially execute arbitrary code, compromising system security.

Recommendation

Update Malwarebytes to the latest version containing the fix.

Other vulnerabilities in Malwarebytes

CVE-2023-43686Medium
In Malwarebytes 4.x and 5.x (and Nebula from 2020-10-21), a large number of Firefox preference files can cause the parser to ignore other browser configuration files, leading to denial of service.

Original NVD description (English source)

An issue was discovered in Malwarebytes 4.x and 5.x (and Nebula 2020-10-21 and later). There is a Heap buffer overflow in various buffer encryption utilities.