CVSS 3.1 Score 7.5 of 10 (high)


Published Dec 31, 2023
Updated: Jan 9, 2024
CWE ID 125


CVE-2023-52267 is a cyber vulnerability that affects ehttp version 1.0.6 before 17405b9. The vulnerability, identified as CWE-125 (Out-of-bounds Read), occurs during error logging for long strings in the simple_log.cpp file. It has a base severity of HIGH with a CVSS v3.1 base score of 7.5. The exploitability score is 3.9, and the impact score is 3.6. This vulnerability does not require any privileges and does not involve user interaction, making it an attractive target for attackers over the network. While it has no impact on integrity or confidentiality, it poses a high availability risk to affected organizations. To remediate this vulnerability, it is recommended to update ehttp to a version that includes a fix for this issue.

Note: The provided information is based on the data extracted from the source but does not include any analysis or opinion from the analyst's perspective.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-52267 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options