CVE-2023-46045

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-46045
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-46045.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-46045
Downstream
AZL (2)
BELL (1)
CGA (2)
CLSA (2)
DEBIAN (1)
JLSEC (1)
OESA (1)
openSUSE (1)
ROOT (1)
SUSE (2)
UBUNTU (1)
Related
openSUSE (1)
SUSE (2)
Published
2024-02-02T00:00:00Z
Modified
2026-08-12T03:30:21Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root.

Database specific 
{
    "cna_assigner":  "mitre",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46045.json"
}
References

Affected packages

Git / gitlab.com/graphviz/graphviz

Affected ranges

Type
GIT
Repo
https://gitlab.com/graphviz/graphviz
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
5733d3a95898f1380424ab15f966ace9a283d506
Fixed
1c6cb9d3de553bd3e3caeea9a61ebe04034d07ee
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "2.36.0"
        },
        {
            "fixed":  "9.x"
        },
        {
            "introduced":  "0"
        },
        {
            "fixed":  "10.0.1"
        }
    ],
    "source":  "DESCRIPTION"
}

Affected versions

2.*
2.38.0
2.42.0
2.42.2
2.42.3
2.42.4
2.44.0
2.44.1
2.46.0
2.46.1
2.47.0
2.47.1
2.47.2
2.47.3
2.48.0
2.49.0
2.49.1
2.49.2
2.49.3
2.50.0
3.*
3.0.0
4.*
4.0.0
5.*
5.0.0
5.0.1
6.*
6.0.1
6.0.2
7.*
7.0.0
7.0.1
7.0.2
7.0.3
7.0.4
7.0.5
7.0.6
8.*
8.0.1
8.0.2
8.0.3
8.0.4
8.0.5
8.1.0
9.*
9.0.0
Other
TRAVIS_CI_BUILD_EXPERIMENTAL
stable_release_2.*
stable_release_2.42.0
stable_release_2.42.2
stable_release_2.42.3
stable_release_2.42.4
stable_release_2.44.0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-46045.json"