CVE-2023-27650

APUS Group Launcher (versions 3.10.73–3.10.88) is affected by CVE-2023-27650 due to a flaw in the FONT_FILE parameter that allows a remote attacker to execute arbitrary code. The root cause is the improper handling of the FONT_FILE input, enabling code execution. Impact is described as arbitrary ...