CVE-2022-27824 - CERT CVE

  1. CVE-2022-27824

ID CVE-2022-27824
Sažetak Improper size check of in sapefd_parse_meta_DESCRIPTION function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file
Reference
CVSS
Base: 5.8
Impact: 4.9
Exploitability:8.6
Pristup
VektorSloženostAutentikacija
NETWORK MEDIUM NONE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL NONE PARTIAL
CVSS vektor AV:N/AC:M/Au:N/C:P/I:N/A:P
Zadnje važnije ažuriranje 18-04-2022 - 16:55
Objavljeno 11-04-2022 - 20:15