CVE-2023-44452

Linux Mint Xreader CBT File Parsing Argument Injection Remote Code
Execution Vulnerability. This vulnerability allows remote attackers to
execute arbitrary code on affected installations of Linux Mint Xreader.
User interaction is required to exploit this vulnerability in that the
target must visit a malicious page or open a malicious file. The specific
flaw exists within the parsing of CBT files. The issue results from the
lack of proper validation of a user-supplied string before using it to
execute a system call. An attacker can leverage this vulnerability to
execute code in the context of the current user. Was ZDI-CAN-22132.