CVE-2023-26923

PoC —

CVSS 3.1

7.0 high

EPSS

<1%p30

Published

Mar 28, 2023 (Mar 28, 2023)

Modified

Jun 17, 2026

Description

Musescore 3.0 to 4.0.1 has a stack buffer overflow vulnerability that occurs when reading misconfigured midi files. If attacker can additional information, attacker can execute arbitrary code.

Vendors: musescore
Products: musescore
Weakness: CWE-787
Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.