Lucene search

K
cve[email protected]CVE-2022-2947
HistoryDec 13, 2022 - 9:15 p.m.

CVE-2022-2947

2022-12-1321:15:11
CWE-119
web.nvd.nist.gov
31
cve-2022-2947
altair hyperview player
memory corruption
vulnerability
nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.7%

Altair HyperView PlayerΒ versions 2021.1.0.27 and prior perform operations on a memory buffer but can read from or write to a memory location outside of the intended boundary of the buffer. This hits initially as a read access violation, leading to a memory corruption situation.

Affected configurations

NVD
Node
altairhyperview_playerRange≀2021.1.0.27

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "HyperView Player",
    "vendor": "Altair",
    "versions": [
      {
        "lessThanOrEqual": "2021.1.0.27",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.7%

Related for CVE-2022-2947