CVE-2023-49313

EUVD-2023-53298
A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the product's processes, potentially leading to remote control and unauthorized access to sensitive user data.
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
Affected Products (NVD)
VendorProductVersion
horsicqxmachoviewer
0.04
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/horsicq/XMachOViewer
https://github.com/louiselalanne/CVE-2023-49313
https://github.com/horsicq/XMachOViewer
https://github.com/louiselalanne/CVE-2023-49313