Lucene search

K
osvGoogleOSV:CVE-2023-34824
HistoryJun 14, 2023 - 2:15 p.m.

CVE-2023-34824

2023-06-1414:15:10
Google
osv.dev
3
fdkaac 1.0.5 heap buffer overflow

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

8

Confidence

High

EPSS

0

Percentile

12.7%

fdkaac before 1.0.5 was discovered to contain a heap buffer overflow in caf_info function in caf_reader.c.

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

8

Confidence

High

EPSS

0

Percentile

12.7%

Related for OSV:CVE-2023-34824