CVE-2023-42800

Summary

CVE-2023-42800 is a buffer overflow vulnerability affecting Moonlight-common-c, a shared GameStream client code component in Moonlight. The issue, introduced in commit 50c0a51b10ecc5b3415ea78c21d96d679e2288f9, arises from the unchecked usage of unsafe C functions and inadequate bounds checking. A malicious game streaming server can potentially exploit this flaw to trigger a buffer overflow, resulting in a client crash or even remote code execution (RCE) if the client lacks sufficient exploit mitigations or if these can be circumvented. The vulnerability was rectified in commit 24750d4b748fefa03d09fcfd6d45056faca354e0.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.