CVE-2023-0215 Use-after-free following BIO_new_NDEF

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Use-After Vulnerabilities Disclosed in 2023 Two use-after vulnerabilities have been reported, CVE-2023-42365 and CVE-2023-0215. CVE-2023-42365 was published on November 27, 2023, while CVE-2023-0215 was published earlier on February 8, 2023. Affected systems may be at risk due to these vulnerabilities. 3 sources 45