CVE-2023-32270

Name of the Vulnerable Software and Affected Versions TELLUS version 4.0.15.0 TELLUS Lite version 4.0.15.0

Description The issue is related to accessing a memory location after the end of a buffer, which can occur when opening a specially crafted V8 file. This may lead to information disclosure and/or arbitrary code execution.

Recommendations For TELLUS version 4.0.15.0, avoid opening specially crafted V8 files until a patch is available. For TELLUS Lite version 4.0.15.0, avoid opening specially crafted V8 files until a patch is available. As a temporary workaround, consider restricting access to V8 files to minimize the risk of exploitation.