CVE-2023-22350

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing parts management information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
JTEKT ELECTRONICS CORPORATIONScreen Creator Advance 2Ver.0.1.1.4 Build01 and earlier

References

Timeline

Published
Feb 13, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-223516.1Out-of-bounds write in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege CVE-2023-223537.8Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verifieCVE-2023-223545.5Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT filCVE-2023-223557.8Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticatCVE-2023-223564.4Improper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via locaCVE-2023-223579.8Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being execuCVE-2023-223587.8In versions beginning with 7.2.2 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer. Note:CVE-2023-223594.3User enumeration in Checkmk <=2.2.0p4 allows an authenticated attacker to enumerate usernames.CVE-2023-22367.8A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Both io_instaCVE-2023-223607.8Use-after free vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier due to lack of error handling process even wCVE-2023-223616.5Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier allows a remote authenticated attacker CVE-2023-223627.5SUSHIRO App for Android outputs sensitive information to the log file, which may result in an attacker obtaining a credential information fr