PT-2023-18446
CVE-2023-22347
·
Published
2023-02-13
·
Updated
2025-03-21
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Screen Creator Advance 2 versions 0.1.1.4 Build01 and earlier
Description
An out-of-bound read issue exists because the end of data cannot be verified when processing file structure information. This could lead to information disclosure and/or arbitrary code execution if a user opens a specially crafted project file.
Recommendations
For versions 0.1.1.4 Build01 and earlier, avoid opening specially crafted project files until a fix is available. As a temporary workaround, consider restricting access to project files from untrusted sources to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾