Vulnerabilities

TI-2023-25581 CVE-2023-47264 · GHSA-p3fw-7jpp-frg7

Certain WithSecure products have a buffer over-read whereby processing certain fuzz file…

LOW 34

Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of service (DoS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00701 Published 2023-11-16 No fix listed CWE-125

TI-2023-25580 CVE-2023-47263 · GHSA-5rp8-vvgw-g5c2

LOW 34

Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE32 file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00701 Published 2023-11-16 No fix listed

TI-2023-22676 CVE-2023-42526 · GHSA-9hqv-r7wx-59c3

MEDIUM 40

Certain WithSecure products allow a remote crash of a scanning engine via decompression of crafted data files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00616 Published 2023-09-18 No fix listed CWE-400

TI-2023-22675 CVE-2023-42525 · GHSA-cjw6-vw4c-q3fw

MEDIUM 40

Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00616 Published 2023-09-18 No fix listed CWE-835

TI-2023-22674 CVE-2023-42524 · GHSA-fv3h-2v3q-45gw

MEDIUM 40

Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00616 Published 2023-09-18 No fix listed CWE-835

TI-2023-22673 CVE-2023-42523 · GHSA-2584-cxmx-j3x4

MEDIUM 40

Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00616 Published 2023-09-18 No fix listed CWE-400

TI-2023-22672 CVE-2023-42522 · GHSA-v938-7wcm-8mhr

MEDIUM 40

Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00616 Published 2023-09-18 No fix listed CWE-400

TI-2023-22671 CVE-2023-42521 · GHSA-65v8-q8g2-34xw

MEDIUM 40

Certain WithSecure products allow a remote crash of a scanning engine via processing of a compressed file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00616 Published 2023-09-18 No fix listed CWE-400

TI-2023-22670 CVE-2023-42520 · GHSA-686w-8g4c-g9wh

MEDIUM 40

Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00616 Published 2023-09-18 No fix listed CWE-400