VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jan 27, 2024· Updated Jun 17, 2026

CVE-2023-52389

CVE-2023-52389

Description

UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::convert() and Poco::UTF32::queryConvert() may return a negative integer if a UTF-32 byte sequence evaluates to a value of 0x80000000 or higher. This is fixed in 1.11.8p2, 1.12.5p2, and 1.13.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Pocoproject/Poco4 versions
    cpe:2.3:a:pocoproject:poco:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:pocoproject:poco:*:*:*:*:*:*:*:*range: <1.11.8
    • cpe:2.3:a:pocoproject:poco:1.11.8:-:*:*:*:*:*:*
    • cpe:2.3:a:pocoproject:poco:1.11.8:p1:*:*:*:*:*:*
    • cpe:2.3:a:pocoproject:poco:1.12.5:-:*:*:*:*:*:*
  • POCO/POCOdescription
  • POCO/POCOllm-create
    Range: before 1.11.8p2, 1.12.5p2, and 1.13.0
  • osv-coords
    pkg:rpm/opensuse/poco&distro=openSUSE%20Tumbleweed
    Range: < 1.14.2-1.1

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.