CVE-2022-35015

2022-09-1608:14:01

redhat.com

access.redhat.com

cve-2022-35015

advancecomp

heap buffer overflow

le_uint32_read

denial of service

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

47.4%

JSON

A heap buffer overflow vulnerability was found in advancecomp in the le_uint32_read() function of the endianrw.h file. This flaw allows an attacker to trick a user into opening a specially crafted file that could cause an application to crash, leading to a denial of service attack.