CVE-2023-49313

Published: Nov 28, 2023Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the product's processes, potentially leading to remote control and unauthorized access to sensitive user data.

Affected (1)

Products: Horsicq: Xmachoviewer

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Horsicq Xmachoviewer	Version 0.04

Related CWEs

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (4)

https://github.com/horsicq/XMachOViewer

Source: cve@mitre.org

Product

https://github.com/louiselalanne/CVE-2023-49313

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/horsicq/XMachOViewer

Source: af854a3a-2127-422b-91ae-364da2661108

Product

https://github.com/louiselalanne/CVE-2023-49313

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.