In Ashlar-Vellum Graphite v13.0.48, the affected application lacks proper validation of user-supplied data when parsing VC6 files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: icscert
Published: 2023-10-26T19:24:48.179Z
Updated: 2024-09-09T16:11:53.686Z
Reserved: 2023-08-10T19:30:27.401Z
Link: CVE-2023-39936
Vulnrichment
Updated: 2024-08-02T18:18:10.188Z
NVD
Status : Modified
Published: 2023-10-26T20:15:08.573
Modified: 2024-11-21T08:16:04.440
Link: CVE-2023-39936
Redhat
No data.