CVE-2023-22291: An invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600

Routine

HIGH 7.0DOWNGRADE

CVE-2023-22291 is a high-severity flaw (CVSS 7.0) affecting ichitaro 2022. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

An invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document can lead to an attempt to free a stack pointer, which causes memory corruption. An attacker can provide a malicious file to trigger this vulnerability.

Why this priority

High severity
Public exploit reference

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	7.0 (High)
Attack vector	Local
Attack complexity	High
Privileges needed	None
User interaction	Required
EPSS exploit chance	0.5% (top 61%)
CISA exploited list	No
Weakness	CWE-590
Published	2023-04-05
Last modified	2026-06-17

Publisher (CNA): Talos · Vendor: justsystems

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2023-04-05 16:15 UTCPublished CVE record published
2026-06-17 05:34 UTCUpdated Record last modified

justsystems ichitaro 2022 DOWNGRADE

Affected: 1.0.1.57600

Fixed in: no fixed release known

Safe to downgrade to: a release before 1.0.1.57600

1. Check installed version

apt-cache policy ichitaro-2022 || rpm -q ichitaro-2022 || ichitaro-2022 --version

2. No fixed release: DOWNGRADE to a release before 1.0.1.57600 (Debian / Ubuntu)

apt-cache madison ichitaro-2022 sudo apt install ichitaro-2022=<VERSION_BEFORE_1.0.1.57600> sudo apt-mark hold ichitaro-2022

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list ichitaro-2022 sudo dnf downgrade ichitaro-2022-<VERSION_BEFORE_1.0.1.57600> sudo dnf versionlock add ichitaro-2022

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2023-22291?

ichitaro 2022: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2023-22291 being exploited?

CVE-2023-22291 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2023-22291 affect?

CVE-2023-22291 affects ichitaro 2022. Severity is high (CVSS 7.0). An invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600. A specially crafted document can lead to an attempt to free a stack pointer, which causes memory corruption. An attacker can provide

How urgent is CVE-2023-22291?

Priority 39/100. High severity; Public exploit reference

Related CVEs

CVE-2023-38128 HIGH 7.8 MITIGATE MITIGATE An out-of-bounds write vulnerability exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372
CVE-2023-38127 HIGH 7.8 MITIGATE MITIGATE An integer overflow exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372
CVE-2023-35126 HIGH 7.8 MITIGATE MITIGATE An out-of-bounds write vulnerability exists within the parsers for both the "DocumentViewStyles" and "Document
CVE-2023-34366 HIGH 7.8 MITIGATE MITIGATE A use-after-free vulnerability exists in the Figure stream parsing functionality of Ichitaro 2023 1.0.1.59372
CVE-2023-22660 HIGH 7.0 DOWNGRADE A heap-based buffer overflow vulnerability exists in the way Ichitaro version 2022 1.0.1.57600 processes certa

References

← Back to latest CVEs