Skip to content
OpenAdvisories
High USN-6423-1 1 CVE

libcue vulnerability

Published Oct 9, 2023 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that CUE incorrectly handled certain files.
An attacker could possibly use this issue to expose sensitive
information or execute arbitrary code.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS libcue 2.2.1-2ubuntu0.1
Ubuntu · 22.04 LTS 22.04:LTS libcue 2.2.1-3ubuntu0.1

Vulnerabilities 1

  • High 8.8
    CVE-2023-43641 EPSS 17%

    libcue vulnerable to out-of-bounds array access

    libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNOME desktop environment can be exploited by downloading a cue sheet from a malicious webpage. Becaus…

    lipnitsk libcue libcue libcue Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2023-43641