CVE-2023-43641
CVSS 3.1 Score 8.8 of 10 (high)
Details
Summary
CVE-2023-43641 is a vulnerability found in versions 2.2.1 and earlier of libcue, a library used for parsing and extracting data from CUE sheets. This vulnerability allows for out-of-bounds array access. Exploitation can occur when a user of the GNOME desktop environment downloads a cue sheet from a malicious webpage, which is then automatically scanned by tracker-miners since it is saved to the Downloads folder. Because the file has a .cue extension, tracker-miners use libcue to parse it, allowing an attacker to gain code execution. The issue has been patched in version 2.3.0. This vulnerability has a high severity rating, with potential impacts on confidentiality and integrity, requiring user interaction and network access for exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions