Skip to content
OpenAdvisories
High · 7.8 CVE-2023-27390 EUVD-2023-31166GHSA-4p57-rrmc-hxh2

A heap-based buffer overflow vulnerability exists in the Sequence::DrawText functionality of Diagon v1.0.139. A specially crafted markdown …

Published Jul 5, 2023 · Updated Aug 2, 2024 · Assigned by talos

Description

A heap-based buffer overflow vulnerability exists in the Sequence::DrawText functionality of Diagon v1.0.139. A specially crafted markdown file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Diagon Diagon v1.0.139 —

References