CVE-2023-3935

Wibu: Buffer Overflow in CodeMeter Runtime

State: Published
Severity: 9.8 Critical
Published: Sep 13, 2023
Updated: Aug 27, 2025
Reserved: Jul 25, 2023

Description

A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CERTVDE

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
CodeMeter RuntimeWibu	0.0 through 7.60bAffected
CodeMeter RuntimeWibu	7.21gNot affected

References

https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/AdvisoryWIBU-230704-01-v3.0.pdf
https://cert.vde.com/en/advisories/VDE-2023-031/
https://cert.vde.com/en/advisories/VDE-2023-030/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.