Lucene search
MitreCVE-2022-38529HistorySep 06, 2022 - 11:15 p.m.
CVE-2022-38529
2022-09-0623:15:08
CWE-787
mitre
web.nvd.nist.gov
23
7
cve-2022-38529
tinyexr
heap-buffer overflow
rleuncompress
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
34.8%
tinyexr commit 0647fb3 was discovered to contain a heap-buffer overflow via the component rleUncompress.
Affected configurations
Node
tinyexr_projecttinyexrMatch2022-06-28
| Vendor | Product | Version | CPE |
|---|---|---|---|
| tinyexr_project | tinyexr | 2022-06-28 | cpe:2.3:a:tinyexr_project:tinyexr:2022-06-28:*:*:*:*:*:*:* |
References
Social References
More
Related
cvelist
cvelist
CVE-2022-38529
2022-09-06 21:08:27
debiancve
debiancve
CVE-2022-38529
2022-09-06 23:15:08
nvd
nvd
CVE-2022-38529
2022-09-06 23:15:08
veracode
veracode
Buffer Overflow
2022-09-07 10:08:50
ubuntucve
ubuntucve
CVE-2022-38529
2022-09-06 00:00:00
prion
prion
Heap overflow
2022-09-06 23:15:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
34.8%
Related for CVE-2022-38529