CVE-2023-6562

Summary

CVE-2023-6562 is a vulnerability affecting Kakadu 7.9, an image rendering library. The issue lies within the JPX Fragment List (flst) box feature. An attacker can take advantage of this flaw to exfiltrate local and remote files accessible by a server, by uploading a maliciously crafted image. Upon displaying the image back to the attacker, the server unintentionally transmits the targeted files, creating a potential data leak.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.