CVE-2023-42536

Name of the Vulnerable Software and Affected Versions libsaped versions prior to SMR Nov-2023 Release 1

Description The issue is related to improper input validation in the saped dec component of libsaped, allowing local attackers to cause out-of-bounds read and write. This can potentially lead to unauthorized access or data modification.

Recommendations For versions prior to SMR Nov-2023 Release 1, update to SMR Nov-2023 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the saped dec component in libsaped to minimize the risk of exploitation.