3 matches found
CVE-2023-23301
The CVE-2023-23301 issue affects CIQ API versions 1.0.0 through 4.1.7, where the news MonkeyC operation code fails to ensure string resources don’t extend past section boundaries. This can allow a malicious CIQ application to craft a string starting near a section end whose length overflows past ...
9.8CVSS9.2AI score0.01057EPSS
SaveExploits1References1Affected Software1
Out-of-bounds
The cdromioctlmediachanged function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM driver CDROMMEDIACHANGED ioctl to read out kernel memory...
4.9CVSS5.3AI score0.0054EPSS
SaveExploits0References16Affected Software2
20