CVE-2023-22846

Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information.

• CWE-125
• CWE-125

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-14Mitigation, Third Party Advisory, US Government Resource
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-14Mitigation, Third Party Advisory, US Government Resource

Published

Apr 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-22840Improper neutralization in software for the Intel(R) oneVPL …5.5
• CVE-2023-22841Unquoted search path in the software installer for the Syste…7.3
• CVE-2023-22842On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.…7.5
• CVE-2023-22843An authenticated attacker with administrative access to the …4.8
• CVE-2023-22844An authentication bypass vulnerability exists in the request…9.8
• CVE-2023-22845An out-of-bounds read vulnerability exists in the TGAInput::…7.5
• CVE-2023-22847Information disclosure vulnerability exists in pg_ivm versio…4.3
• CVE-2023-22848Improper access control in some Intel(R) Thunderbolt(TM) DCH…5.5
• CVE-2023-22849An improper neutralization of input during web page generati…6.1
• CVE-2023-2285The WP Activity Log Premium plugin for WordPress is vulnerab…4.3
• CVE-2023-22850Tiki before 24.1, when the Spreadsheets feature is enabled, …8.8
• CVE-2023-22851Tiki before 24.2 allows lib/importer/tikiimporter_blog_wordp…7.2