CVE-2023-48422
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Dec 8, 2023
Updated: Mar 12, 2024
CWE ID 125
Summary
CVE-2023-48422 is a vulnerability affecting the Init of protocolnetadapter.cpp in a specific software component. This issue involves a missing bounds check, leading to a possible out-of-bounds read event. The consequences of this vulnerability are significant as it could result in local information disclosure, meaning sensitive data may be exposed, even without the need for additional execution privileges. Importantly, user interaction is not required for an attacker to exploit this vulnerability, making it a potentially dangerous threat if left unaddressed.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share