Unrated severityNVD Advisory· Published Feb 2, 2024· Updated Nov 4, 2025

CVE-2023-46045

Description

Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this file is typically owned by root.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Graphviz/Graphvizllm-fuzzy
Range: >=2.36.0, <10.0.1
osv-coords22 versions
pkg:apk/chainguard/graphviz pkg:apk/chainguard/graphviz-dev pkg:apk/chainguard/graphviz-doc pkg:apk/chainguard/graphviz-graphs pkg:apk/chainguard/lua5.4-graphviz pkg:apk/chainguard/py3-gv pkg:apk/wolfi/graphviz pkg:apk/wolfi/graphviz-dev pkg:apk/wolfi/graphviz-doc pkg:apk/wolfi/graphviz-graphs pkg:apk/wolfi/lua5.4-graphviz pkg:apk/wolfi/py3-gv pkg:rpm/opensuse/graphviz-addons&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/graphviz&distro=openSUSE%20Leap%2015.5 pkg:rpm/suse/graphviz-addons&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP4 pkg:rpm/suse/graphviz-addons&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP5 pkg:rpm/suse/graphviz-addons&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP5 pkg:rpm/suse/graphviz-addons&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP6 pkg:rpm/suse/graphviz-addons&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP5 pkg:rpm/suse/graphviz-addons&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP5 pkg:rpm/suse/graphviz-addons&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP5 pkg:rpm/suse/graphviz&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5
< 10.0.1-r0+ 21 more
- (no CPE)range: < 10.0.1-r0
- (no CPE)range: < 10.0.1-r0
- (no CPE)range: < 10.0.1-r0
- (no CPE)range: < 10.0.1-r0
- (no CPE)range: < 10.0.1-r0
- (no CPE)range: < 10.0.1-r0
- (no CPE)range: < 10.0.1-r0
- (no CPE)range: < 10.0.1-r0
- (no CPE)range: < 10.0.1-r0
- (no CPE)range: < 10.0.1-r0
- (no CPE)range: < 10.0.1-r0
- (no CPE)range: < 10.0.1-r0
- (no CPE)range: < 2.48.0-150400.3.3.1
- (no CPE)range: < 2.48.0-150400.3.3.1
- (no CPE)range: < 2.48.0-150400.3.3.1
- (no CPE)range: < 2.48.0-150400.3.3.1
- (no CPE)range: < 2.48.0-150400.3.3.1
- (no CPE)range: < 2.48.0-150400.3.3.1
- (no CPE)range: < 2.48.0-150400.3.3.1
- (no CPE)range: < 2.48.0-150400.3.3.1
- (no CPE)range: < 2.48.0-150400.3.3.1
- (no CPE)range: < 2.48.0-150400.3.3.1

Patches

Vulnerability mechanics

References

seclists.org/fulldisclosure/2024/Feb/24mitremailing-list
gitlab.com/graphviz/graphviz/-/issues/2441mitre
seclists.org/fulldisclosure/2024/Feb/24mitre
seclists.org/fulldisclosure/2024/Jan/73mitre
www.openwall.com/lists/oss-security/2024/02/01/2mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000