CVE-2023-21687

The software reads data past the end, or before the beginning, of the intended buffer.

The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.