CVE-2023-42520

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure Elements Endpoint Protection for Mac 17 and later, Linux Security 64 12.0 , Linux Protection 12.0, and WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

No affected versions have been published.

Timeline

Published
Sep 18, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-425217.5Certain WithSecure products allow a remote crash of a scanning engine via processing of a compressed file. This affects WithSecure Client SeCVE-2023-425227.5Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file. This affects WithSecuCVE-2023-425237.5Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file. This affects WithSecure Client Security 15CVE-2023-425247.5Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security CVE-2023-425257.5Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security CVE-2023-425267.5Certain WithSecure products allow a remote crash of a scanning engine via decompression of crafted data files. This affects WithSecure ClienCVE-2023-425275.5Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to expose sCVE-2023-425287.8Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to executeCVE-2023-425297.8Out-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to execute arbitrary code.CVE-2023-42534.8The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such CVE-2023-425307.5Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct withoCVE-2023-425317.1Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on start