CVE-2023-26923 in Musescore

Riassunto

di MITRE • 28/03/2023

Musescore 3.0 to 4.0.1 has a stack buffer overflow vulnerability that occurs when reading misconfigured midi files. If attacker can additional information, attacker can execute arbitrary code.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 27/02/2023
• Divulgazione: 28/03/2023
• Moderazione: accettato
• Voce: VDB-224195
• CPE: pronto
• CWE: CWE-121 (confermato)
• CVSS: 7.0 (NVD)
• EPSS: 0.00362
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-26923
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-26923
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-26923/