CVE-2023-22346

Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing template information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.

Score

CVSS 3.1 7.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2023-02-13

Last modified

2025-03-21

Weaknesses

CWE-125

Affected products

• Screen Creator Advance 2 (Jtekt)
• Screen Creator Advance 2 (Jtekt Electronics Corporation)

References

• https://jvn.jp/en/vu/JVNVU98917488/
• https://www.electronics.jtekt.co.jp/en/topics/202302035233/
• https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/