CVE-2023-52339

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. It may result in buffer overflows.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Jan 12, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-52345.4The Related Products for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'woo-related' shortcode in versioCVE-2023-523407.5The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size threshold that can be consumed easily, e.g., leading CVE-2023-523417.5In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check. This could lead to CVE-2023-523427.5In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosuCVE-2023-523435.5In SecurityCommand message after as security has been actived., there is a possible improper input validation. This could lead to remote infCVE-2023-523445.3In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosuCVE-2023-523456.0In modem driver, there is a possible system crash due to improper input validation. This could lead to local information disclosure with SysCVE-2023-523464.4In modem driver, there is a possible system crash due to improper input validation. This could lead to local information disclosure with SysCVE-2023-523475.5In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysteCVE-2023-523484.4In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysteCVE-2023-523494.4In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysteCVE-2023-52358.8The Ovic Responsive WPBakery WordPress plugin before 1.2.9 does not limit which options can be updated via some of its AJAX actions, which m
CVE-2023-52339: Medium severity, CVSS 6.5 | Vulnix