CVE-2023-44428 MuseScore CAP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

MuseScore CAP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MuseScore. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2023-44428

CVE-2023-44428 affects MuseScore’s CAP file parser. The issue is a heap-based buffer overflow caused by insufficient validation of the length of user-supplied CAP data before copying it into a heap buffer. This leads to remote code execution in the context of the current process. Exploitation req...