CVE-2023-3308

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic has been found in whaleal IceFrog 1.1.8. Affected is an unknown function of the component Aviator Template Engine. The manipulation leads to deserialization. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-231804.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

No affected versions have been published.

Timeline

Published: Jun 18, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-330807.5Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.CVE-2023-330817.5Transient DOS while converting TWT (Target Wake Time) frame parameters in the OTA broadcast.CVE-2023-330829.8Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE.CVE-2023-330839.8Memory corruption in WLAN Host while processing RRM beacon on the AP.CVE-2023-330847.5Transient DOS while processing IE fragments from server during DTLS handshake.CVE-2023-330857.8Memory corruption in wearables while processing data from AON.CVE-2023-330867.5Transient DOS while processing multiple IKEV2 Informational Request to device from IPSEC server with different identifiers.CVE-2023-330877.8Memory corruption in Core while processing RX intent request.CVE-2023-330887.8Memory corruption when processing cmd parameters while parsing vdev.CVE-2023-330897.5Transient DOS when processing a NULL buffer while parsing WLAN vdev.CVE-2023-33095.4A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an un CVE-2023-330905.5Transient DOS while processing channel information for speaker protection v2 module in ADSP.