CVE-2017-2808

CVE-2017-2808 is a high-severity use-after-free vulnerability in Ledger-CLI version 3.1.1, specifically within its account parsing component. An attacker can exploit this by convincing a user to open a specially crafted ledger file, leading to arbitrary code execution. The attack requires user interaction and local access, but successful exploitation grants high confidentiality, integrity, and availability impacts. While no public exploit intelligence or active exploitation has been observed, and community discussion is minimal, the vulnerability remains a significant risk for affected systems.