Cubism Core in Live2D Cubism Editor 4.2.03 allows out-of-bounds write via a crafted Section Offset Table or Count Info Table in an MOC3 file.
References
| Link | Resource |
|---|---|
| https://docs.live2d.com/cubism-editor-manual/updates4/ | Release Notes |
| https://github.com/openl2d/moc3ingbird | Third Party Advisory |
| https://news.ycombinator.com/item?id=35013098 | Issue Tracking |
| https://undeleted.ronsor.com/live2d-a-security-trainwreck/ | Exploit |
| https://docs.live2d.com/cubism-editor-manual/updates4/ | Release Notes |
| https://github.com/openl2d/moc3ingbird | Third Party Advisory |
| https://news.ycombinator.com/item?id=35013098 | Issue Tracking |
| https://undeleted.ronsor.com/live2d-a-security-trainwreck/ | Exploit |
Configurations
History
21 Nov 2024, 07:53
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://docs.live2d.com/cubism-editor-manual/updates4/ - Release Notes | |
| References | () https://github.com/openl2d/moc3ingbird - Third Party Advisory | |
| References | () https://news.ycombinator.com/item?id=35013098 - Issue Tracking | |
| References | () https://undeleted.ronsor.com/live2d-a-security-trainwreck/ - Exploit |
Information
Published : 2023-03-03 20:15
Updated : 2024-11-21 07:53
NVD link : CVE-2023-27566
Mitre link : CVE-2023-27566
CVE.ORG link : CVE-2023-27566
JSON object : View
Products Affected
live2d
- cubism_editor
CWE
CWE-787
Out-of-bounds Write