CVE-2023-22353

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing control management information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
JTEKT ELECTRONICS CORPORATIONScreen Creator Advance 2Ver.0.1.1.4 Build01 and earlier

References

Timeline

Published
Feb 13, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-223545.5Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT filCVE-2023-223557.8Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticatCVE-2023-223564.4Improper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via locaCVE-2023-223579.8Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being execuCVE-2023-223587.8In versions beginning with 7.2.2 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer. Note:CVE-2023-223594.3User enumeration in Checkmk <=2.2.0p4 allows an authenticated attacker to enumerate usernames.CVE-2023-22367.8A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Both io_instaCVE-2023-223607.8Use-after free vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier due to lack of error handling process even wCVE-2023-223616.5Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier allows a remote authenticated attacker CVE-2023-223627.5SUSHIRO App for Android outputs sensitive information to the log file, which may result in an attacker obtaining a credential information frCVE-2023-223637.5A stack-based buffer overflow in the Command Centre Server allows an attacker to cause a denial of service attack via assigning cardholders CVE-2023-223657.2An OS command injection vulnerability exists in the ys_thirdparty check_system_user functionality of Milesight UR32L v32.3.0.5. A specially
CVE-2023-22353: High severity, CVSS 7.8 | Vulnix