CyberSecBulletin

Diagon vulnerabilities

We track 2 vulnerabilities in Diagon products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 5, 2023.

2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score

Latest Diagon vulnerabilities

  • 7.8 High severity

    Diagon: Improper Validation of Array Index

    CVE-2023-31194Diagon

    An improper array index validation vulnerability exists in the GraphPlanar::Write functionality of Diagon v1.0.139. A specially crafted markdown file can lead to memory corruption. A victim would need to open a malicious file to trigger this vulnerability.

  • 7.8 High severity

    Diagon: Out-of-bounds Write

    CVE-2023-27390Diagon

    A heap-based buffer overflow vulnerability exists in the Sequence::DrawText functionality of Diagon v1.0.139. A specially crafted markdown file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.