CVE-2023-1570

CVSS V2 None CVSS V3 None
Description
A vulnerability, which was classified as problematic, has been found in syoyo tinydng. Affected by this issue is the function __interceptor_memcpy of the file tiny_dng_loader.h. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. It is recommended to apply a patch to fix this issue. VDB-223562 is the identifier assigned to this vulnerability.
Overview
  • CVE ID
  • CVE-2023-1570
  • Assigner
  • cna@vuldb.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-03-22T15:15:10
  • Last Modified Date
  • 2023-03-28T15:05:42
Weakness Enumerations
CWE URL
CWE-122 http://cwe.mitre.org/data/definitions/122.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:tinydng_project:tinydng:*:*:*:*:*:*:*:* 1 OR 2023-02-20
References
Reference URL Reference Tags
https://github.com/10cksYiqiyinHangzhouTechnology/tinydngSecurityIssueReport1 Exploit Third Party Advisory
https://github.com/syoyo/tinydng/issues/28 Exploit Issue Tracking Patch Vendor Advisory
https://github.com/syoyo/tinydng/issues/29 Exploit Issue Tracking Vendor Advisory
https://vuldb.com/?ctiid.223562 Permissions Required Third Party Advisory
https://vuldb.com/?id.223562 Third Party Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-1570
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1570
History
Created Old Value New Value Data Type Notes
2023-04-17 03:11:00 Added to TrackCVE
2023-04-17 03:11:03 Weakness Enumeration new
2023-04-17 04:52:24 CVSS V3 information new
2023-04-17 04:52:24 CVSS V2 information new