CVE-2023-41375

Use after free vulnerability exists in Kostac PLC Programming Software Version 1.6.11.0. Arbitrary code may be executed by having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier because the issue exists in parsing of KPP project files. The vendor states that Kostac PLC Programming Software Version 1.6.10.0 or later implements the function which prevents a project file alteration. Therefore, to mitigate the impact of these vulnerabilities, a project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier needs to be saved again using Kostac PLC Programming Software Version 1.6.10.0 or later.

• CWE-416

• https://jvn.jp/en/vu/JVNVU95282683/index.htmlThird Party Advisory
• https://www.electronics.jtekt.co.jp/en/topics/202309125391/Vendor Advisory
• https://jvn.jp/en/vu/JVNVU95282683/index.htmlThird Party Advisory
• https://www.electronics.jtekt.co.jp/en/topics/202309125391/Vendor Advisory

Published

Sep 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-41367Due to missing authentication check in webdynpro application…5.3
• CVE-2023-41368The OData service of the S4 HANA (Manage checkbook apps) - v…5.3
• CVE-2023-41369The Create Single Payment application of SAP S/4HANA - versi…4.3
• CVE-2023-41372The vulnerability allows an unprivileged (untrusted) third- …7.8
• CVE-2023-41373 A directory traversal vulnerability exists in the BIG-IP Co…9.9
• CVE-2023-41374Double free issue exists in Kostac PLC Programming Software …7.8
• CVE-2023-41376Nokia Service Router Operating System (SR OS) 22.10 and SR L…7.5
• CVE-2023-41377Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2023-41378In certain conditions for Calico Typha (v3.26.2, v3.25.1 and…7.5
• CVE-2023-4138Allocation of Resources Without Limits or Throttling in GitH…6.5
• CVE-2023-41387A SQL injection in the flutter_downloader component through …9.1
• CVE-2023-4139The WP Ultimate CSV Importer plugin for WordPress is vulnera…7.5