CVE-2023-22360

2023-02-1300:00:00

jpcert

www.cve.org

screen creator advance

vulnerability

use-after free

information disclosure

arbitrary code execution

cve-2023-22360

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.8%

JSON

Use-after free vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier due to lack of error handling process even when an error was detected. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.

CNA Affected

[
  {
    "vendor": "JTEKT ELECTRONICS CORPORATION",
    "product": "Screen Creator Advance 2",
    "versions": [
      {
        "version": "Ver.0.1.1.4 Build01 and earlier",
        "status": "affected"
      }
    ]
  }
]