CVE-2023-43641

Summary

CVE-2023-43641 is a vulnerability affecting versions 2.2.1 and below of the libcue library. This library, used for parsing and extracting data from CUE sheets, is susceptible to out-of-bounds array access. Malicious CUE files can be downloaded from untrusted sources, such as malicious webpages, and saved to the `~/Downloads` folder. When these files are scanned by tracker-miners, which use libcue for parsing, the vulnerability is exploited, resulting in code execution. The issue is resolved in version 2.3.0 of the library.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.