CVE-2023-33913

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

In DRM/oemcrypto, there is a possible out of bounds write due to an incorrect calculation of buffer size.This could lead to remote escalation of privilege with System execution privileges needed

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Aug 7, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-339147.5In NIA0 algorithm in Security Mode Command, there is a possible missing verification incorrect input. This could lead to remote information CVE-2023-339157.5In LTE protocol stack, there is a possible missing permission check. This could lead to remote information disclosure no additional executio CVE-2023-339165.5In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution CVE-2023-339175.5In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution CVE-2023-339185.5In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution CVE-2023-339197.2A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05).CVE-2023-33927.2The Read More & Accordion WordPress plugin before 3.2.7 unserializes user input provided via the settings, which could allow high-privilege CVE-2023-339206.8A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05).CVE-2023-339216.8A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05).CVE-2023-339224.3Missing Authorization vulnerability in Elementor Elementor Website Builder.This issue affects Elementor Website Builder: from n/a through 3.CVE-2023-339234.3Missing Authorization vulnerability in HashThemes Viral News, HashThemes Viral, HashThemes HashOne.This issue affects Viral News: from n/a t CVE-2023-339249.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Felix Welberg SIS Handball allows SQL