Out-of-Bounds Read Vulnerability in KV STUDIO and KV REPLAY VIEWER by Keyence
CVE-2023-42138

7.8HIGH

Key Information:

Vendor: Keyence Corporation
Status: Kv Studio; Kv Replay Viewer
Vendor: CVE Published:; 11 October 2023

🔔 Create Keyence Corporation Vulnerability Alert

What is CVE-2023-42138?

An out-of-bounds read vulnerability is present in KV STUDIO and KV REPLAY VIEWER, leading to potential information disclosure or arbitrary code execution. This occurs when a user opens a specially crafted file within KV STUDIO PLAYER, highlighting the need for users to exercise caution while handling files to mitigate security risks. Users are advised to upgrade to the latest versions to safeguard against this vulnerability.

Affected Version(s)

KV REPLAY VIEWER Ver. 2.62 and earlier

KV STUDIO Ver. 11.62 and earlier

References

https://www.keyence.com/vulnerability231001

https://jvn.jp/en/vu/JVNVU94752076/index.html

CVSS V3.1

Score:

7.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 11, 2023
Vulnerability Reserved
Sep 8, 2023

CVE-2023-42138 Data

JSON