CVE-2023-43783

Summary

CVE-2023-43783: A vulnerability has been identified in Cadence versions up to 0.9.2, released before August 21, 2023. The issue involves an insecure use of the /tmp/cadence-wineasio.reg file. An adversary can exploit this by creating or overwriting files through a symlink attack, even if they have already existed before Cadence started. This vulnerability carries the risk of code injection into the Wine registry in certain kernel configurations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.