Cyber Resilience

CVE-2023-50434

Critical

Published: 29 April 2024

Published
29 April 2024
Modified
15 April 2026
KEV Added
—
Patch
—
CVSS Score v3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0021 42.7th percentile
Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2023-50434 is a critical-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Mathyvanhoef (inferred from references). Its CVSS base score is 9.8 (Critical).

Operationally, ranked at the 42.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

emdns_resolve_raw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\0' terminated, leading to a stack-based buffer over-read. This can be triggered by a remote adversary that can send DNS requests to the emdns…

more

server. The impact could vary depending on the system libraries, compiler, and processor architecture. Code before be565c3 is unaffected.

CWE(s)
CWE-121

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

Mathyvanhoef
—
inferred from references and description; NVD did not file a CPE for this CVE

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References