Skip to content
OpenAdvisories
High · 7.0 CVE-2023-22660 EUVD-2023-26790GHSA-22p7-2347-c784

A heap-based buffer overflow vulnerability exists in the way Ichitaro version 2022 1.0.1.57600 processes certain LayoutBox stream record ty…

Published Apr 5, 2023 · Updated Feb 10, 2025 · Assigned by talos

Description

A heap-based buffer overflow vulnerability exists in the way Ichitaro version 2022 1.0.1.57600 processes certain LayoutBox stream record types. A specially crafted document can cause a buffer overflow, leading to memory corruption, which can result in arbitrary code execution.To trigger this vulnerability, the victim would need to open a malicious, attacker-created document.

Affected products

VendorProductAffectedFixed
Ichitaro Ichitaro 2022 1.0.1.57600 —

References