CVE-2023-21367

Summary

CVE-2023-21367 is a vulnerability affecting Scudo software. It involves heap out-of-bound (OOB) read/write issues, which can be exploited to disclose local information without requiring any additional execution privileges. Notably, user interaction is not needed for an attacker to successfully exploit this vulnerability. The insecure implementation or design of Scudo is the root cause of this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.