CVE-2023-33457

Summary

CVE-2023-33457 is a newly disclosed vulnerability affecting Sogou Workflow version 0.10.6. The issue lies in the URIParser module, where a memory function named memcpy is used with a negative size during the parsing of URLs. This misconfiguration can lead to a buffer overflow, resulting in a crash. Attackers may exploit this vulnerability to execute arbitrary code or cause denial-of-service conditions, potentially endangering the security of systems running the affected software. It is advised to update to the latest version of Sogou Workflow to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.