CVE-2023-23082 Memory corruption in n/a

Medium 4.6 Published Updated

Attackers can cause a denial of service in Kodi Home Theater Software via a heap buffer overflow triggered by improper offset argument handling.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Local or same network only
Victim action needed
Not needed
Fix
Available

What is CVE-2023-23082?

CVE-2023-23082 is a medium-severity memory corruption vulnerability in n/a, published on 3 Feb 2023. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A heap buffer overflow vulnerability in Kodi Home Theater Software up to 19.5 allows attackers to cause a denial of service due to an improper length of the value passed to the offset argument.

Weakness: CWE-787

Which versions are affected by CVE-2023-23082?

It affects 1 product.

Products include Kodi Kodi.

How do I fix CVE-2023-23082?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2023-23082 being exploited?

There is no known exploitation of CVE-2023-23082 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2023-23082, GHSA-xqhf-3qqw-8q2m, UBUNTU-CVE-2023-23082.

Is CVE-2023-23082 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free