high7.3
CVE-2023-26266
In AFL++ 4.05c, the CmpLog component uses the current working directory to resolve and execute unprefixed fuzzing targets, allowing code execution.
Impact
In AFL++ 4.05c, the CmpLog component uses the current working directory to resolve and execute unprefixed fuzzing targets, allowing code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Afl\+\+ Project | Afl\+\+ | Version 4.05c |