CVE-2023-50671

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In exiftags 1.01, nikon_prop1 in nikon.c has a heap-based buffer overflow (write of size 28) because snprintf can write to an unexpected address.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Jan 11, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-506778.8An issue in NETGEAR-DGND4000 v.1.1.00.15_1.00.15 allows a remote attacker to escalate privileges via the next_file parameter to the /setup.cCVE-2023-50687.8Delta Electronics DIAScreen may write past the end of an allocated buffer while parsing a specially crafted input file. This could allow anCVE-2023-506857.5An issue in Hipcam Cameras RealServer v.1.0 allows a remote attacker to cause a denial of service via a crafted script to the client_port paCVE-2023-506928.8File Upload vulnerability in JIZHICMS v.2.5, allows remote attacker to execute arbitrary code via a crafted file uploaded and downloaded to CVE-2023-506939.8An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request.CVE-2023-506949.8An issue in dom96 HTTPbeast v.0.4.1 and before allows a remote attacker to send a malicious crafted request due to insufficient parsing in tCVE-2023-50706.5The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up toCVE-2023-507007.8Insecure Permissions vulnerability in Deepin dde-file-manager 6.0.54 and earlier allows privileged operations to be called by unprivileged uCVE-2023-507028.8Sikka SSCWindowsService 5 2023-09-14 executes a program as LocalSystem but allows full control by low-privileged users (and low-privileged uCVE-2023-507035.9An attacker with network access could perform a man-in-the-middle (MitM) attack and capture sensitive information to gain unauthorized accesCVE-2023-507046.1An attacker could construct a URL within the application that causes a redirection to an arbitrary external domain and could be leveraged toCVE-2023-507055.3An attacker could create malicious requests to obtain sensitive information about the web server.
CVE-2023-50671: High severity, CVSS 7.8 | Vulnix