How severe is CVE-2023-45927?

CVE-2023-45927 has a CVSS 3.x base score of 9.1, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability high.

Is CVE-2023-45927 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (54th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2023-45927?

CVE-2023-45927 affects Jedsoft S-lang. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2023-45927?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

Does CVE-2023-45927 have an EU (EUVD) identifier?

Yes. CVE-2023-45927 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2023-50190.

When was CVE-2023-45927 published?

CVE-2023-45927 was published on 2024-03-27 and last updated on 2026-06-17.

CVE-2023-45927

CVE-2023-45927 is a critical-severity vulnerability in Jedsoft S-lang with a CVSS 3.x base score of 9.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-703.

Key facts

Severity: Critical (CVSS 3.x base score 9.1)
EPSS exploit prediction: 1% (54th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2023-50190
Weakness: CWE-703
Affected product: Jedsoft S-lang
Published: 2024-03-27
Last modified: 2026-06-17

Description

S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf().

Frequently asked questions

What is CVE-2023-45927?: S-Lang 2.3.2 was discovered to contain an arithmetic exception via the function tt_sprintf().
How severe is CVE-2023-45927?: CVE-2023-45927 has a CVSS 3.x base score of 9.1, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability high.
Is CVE-2023-45927 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (54th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2023-45927?: CVE-2023-45927 affects Jedsoft S-lang. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2023-45927?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
Does CVE-2023-45927 have an EU (EUVD) identifier?: Yes. CVE-2023-45927 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2023-50190.
When was CVE-2023-45927 published?: CVE-2023-45927 was published on 2024-03-27 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:jedsoft:s-lang:2.3.2:*:*:*:*:*:*:*

More vulnerabilities in Jedsoft S-lang

CVE-2023-45929 — Critical (CVSS 9.1): S-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr().

All CVEs affecting Jedsoft S-lang →

Other CWE-703 vulnerabilities

CVE-2025-13026 — Critical (CVSS 9.8): Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in…
CVE-2025-13023 — Critical (CVSS 9.8): Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in…
CVE-2025-13022 — Critical (CVSS 9.8): Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and…
CVE-2025-13021 — Critical (CVSS 9.8): Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and…
CVE-2024-39815 — Critical (CVSS 9.1): Improper check or handling of exceptional conditions vulnerability affecting Vonets industrial wifi bridge relays…
CVE-2024-21525 — High (CVSS 8.3): All versions of the package node-twain are vulnerable to Improper Check or Handling of Exceptional Conditions due to…

Browse all CWE-703 vulnerabilities →