CVE-2023-22360

Use-after free vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier due to lack of error handling process even when an error was detected. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.

Score

CVSS 3.1 7.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2023-02-13

Last modified

2025-03-21

Weaknesses

CWE-416

Affected products

• Screen Creator Advance 2 (Jtekt)
• Screen Creator Advance 2 (Jtekt Electronics Corporation)

References

• https://jvn.jp/en/vu/JVNVU98917488/
• https://www.electronics.jtekt.co.jp/en/topics/202302035233/
• https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/