CVE-2023-43789: fedoraproject fedora Out-of-bounds Read

Vulnerability summary

CVE-2023-43789 is a medium (CVSS 5.5) Out-of-bounds Read vulnerability in fedoraproject fedora. EPSS estimates a 0.36% chance of exploitation in the next 30 days, higher than 28.7% of scored vulnerabilities.

Timeline

1. 12-10-2023
   PublishedVulnerability first disclosed.
2. 06-11-2025
   Last modifiedVulnerability information updated.

Description

A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger an out-of-bounds read error and read contents of memory on the system.

• CWE-125Out-of-bounds ReadThe product reads data past the end, or before the beginning, of the intended buffer.