CVE-2023-21620

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Feb 17, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-216217.8FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an Improper Input Validation vulnerability that could result in a CVE-2023-216227.8FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitra CVE-2023-216245.5Information disclosure in DSP Services while loading dynamic module.CVE-2023-216257.5Information disclosure in Network Services due to buffer over-read while the device receives DNS response.CVE-2023-216267.1Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.CVE-2023-216277.8Memory corruption in Trusted Execution Environment while calling service API with invalid address.CVE-2023-216287.8Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.CVE-2023-216296.8Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.CVE-2023-21638.8Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary CVE-2023-216307.8Memory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal.CVE-2023-216319.8Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.CVE-2023-216327.8Memory corruption in Automotive GPU while querying a gsl memory node.