CVE-2023-1709highCWE-121

CVE-2023-1709: high-severity vulnerability in Datalogics Library APDFL

Datalogics Library APDFL Stack-based Buffer Overflow

Published · Updated

Follow this CVE+ Monitor Teamcenter Visualization+ Monitor JT2Go

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.8epss 0.3%
Datalogics Library APDFLThe v18.0.4PlusP1e and prior contains a stack-based buffer overflow due to documents containing corrupted fonts, which could allow an attack that causes an unhandled crash during the rendering process.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Datalogics · Library APDFLSiemens · JT2GoSiemens · Teamcenter Visualization
Related CVEs — Datalogics Library APDFL

In the same product, most dangerous first.

CVE-2020-26987—CVE-2020-26987EPSS 4.5%CVE-2020-26985—CVE-2020-26985EPSS 4.5%CVE-2020-26991—CVE-2020-26991EPSS 4.2%CVE-2020-26990—CVE-2020-26990EPSS 4.1%CVE-2020-26995—CVE-2020-26995EPSS 3.6%CVE-2020-28383—CVE-2020-28383EPSS 3.6%