CVE-2023-22383

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Dec 5, 2023
Updated: Apr 12, 2024
CWE ID 787
CWE ID 416

Summary

CVE-2023-22383 is a memory corruption vulnerability affecting certain camera devices during the installation process for a specific DMA buffer. When installing this buffer, the camera software fails to allocate memory properly, resulting in unintended write access to adjacent memory locations. An attacker who can exploit this issue may be able to execute arbitrary code or cause the device to crash, potentially leading to denial-of-service or privilege escalation. Camera users are advised to install patches or updates as soon as they become available to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share