CVE-2023-42800
CVSS 3.1 Score 8.8 of 10 (high)
Details
Summary
CVE-2023-42800 is a buffer overflow vulnerability affecting Moonlight-common-c, a shared GameStream client code component in Moonlight. The issue, introduced in commit 50c0a51b10ecc5b3415ea78c21d96d679e2288f9, arises from the unchecked usage of unsafe C functions and inadequate bounds checking. A malicious game streaming server can potentially exploit this flaw to trigger a buffer overflow, resulting in a client crash or even remote code execution (RCE) if the client lacks sufficient exploit mitigations or if these can be circumvented. The vulnerability was rectified in commit 24750d4b748fefa03d09fcfd6d45056faca354e0.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions