Lucene search

MitreCVE-2022-35111

HistoryAug 16, 2022 - 9:15 p.m.

CVE-2022-35111

2022-08-1621:15:11

CWE-770

mitre

web.nvd.nist.gov

cve-2022-35111

swftools

stack overflow

vulnerability

__sanitizer

stackdepotnode

hash

sanitizer

stacktrace

nvd

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

19.9%

JSON

SWFTools commit 772e55a2 was discovered to contain a stack overflow via __sanitizer::StackDepotNode::hash(__sanitizer::StackTrace const&) at /sanitizer_common/sanitizer_stackdepot.cpp.

Affected configurations

Nvd

Node

swftoolsswftoolsMatch-

VendorProductVersionCPE
swftoolsswftools-cpe:/a:swftools:swftools:-:::

Vendor	Product	Version	CPE
swftools	swftools	-	cpe:/a:swftools:swftools:-:::

References

github.com/matthiaskramm/swftools/issues/184

Social References

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

19.9%

JSON

Related for CVE-2022-35111