CVE-2023-39346: Renjikai Linuxasmcallgraph

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

LinuxASMCallGraph is software for drawing the call graph of the programming code. Linux ASMCallGraph before commit 20dba06bd1a3cf260612d4f21547c25002121cd5 allows attackers to cause a remote code execution on the server side via uploading a crafted ZIP file due to incorrect filtering rules of uploaded file. The problem has been patched in commit 20dba06bd1a3cf260612d4f21547c25002121cd5. There are no known workarounds.

Affected products

• Renjikai Linuxasmcallgraph: before 2022-02-08 (fixed in 2022-02-08)

Published 2023-08-04. Last modified 2026-06-17.