Skip to content
OpenAdvisories
High · 7.8 CVE-2023-34366 EUVD-2023-38446GHSA-h3vv-x3m8-whmj

A use-after-free vulnerability exists in the Figure stream parsing functionality of Ichitaro 2023 1.0.1.59372. A specially crafted document…

Published Oct 19, 2023 · Updated Nov 4, 2025 · Assigned by talos

Description

A use-after-free vulnerability exists in the Figure stream parsing functionality of Ichitaro 2023 1.0.1.59372. A specially crafted document can cause memory corruption, resulting in arbitrary code execution. Victim would need to open a malicious file to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
Ichitaro 2023 Ichitaro 2023 1.0.1.59372 —

References