Lucene search

K
osvGoogleOSV:CVE-2023-27390
HistoryJul 05, 2023 - 4:15 p.m.

CVE-2023-27390

2023-07-0516:15:09
Google
osv.dev
7
sequence::drawtext
markdown file
arbitrary code execution
malicious file
vulnerability
software

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

29.9%

A heap-based buffer overflow vulnerability exists in the Sequence::DrawText functionality of Diagon v1.0.139. A specially crafted markdown file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

29.9%