CVE-2023-22291

PoC —

CVSS 3.1

7.8 high

EPSS

<1%p38

Published

Apr 5, 2023 (Apr 5, 2023)

Modified

Jun 17, 2026

Description

An invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document can lead to an attempt to free a stack pointer, which causes memory corruption. An attacker can provide a malicious file to trigger this vulnerability.

Vendors: justsystems
Products: ichitaro 2022
Weakness: CWE-590
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news1 stories

Vulnerability Spotlight: Vulnerabilities in popular Japanese word processing software could lead to arbitrary code execution, other issues

Cisco TalosApr 5, 15:23 UTC · Apr 5, 2023Vulnerability in the wildCVE-2022-43664 CVE-2023-22660 CVE-2023-22291+1 CVEs