CVE-2023-40294

CVE-2023-40294 affects Boron 2.0.8, specifically the libboron component; the heap-based buffer overflow occurs in ur_parseBlockI (i_parse_blk.c). The vulnerability is rated with CVSSv3.1: Network attack vector, low complexity, no privileges, user interaction required, and Availability impact High...

CVE-2023-40295

CVE-2023-40295 affects the Boron project: libboron in Boron 2.0.8 contains a heap-based overflow in the function ur_strInitUtf8 (string.c). The vulnerability is reported with a high impact (CVSS v3.1: High, network attack, user interaction required). Public detail across connected sources confirm...