Lucene search
HistorySep 06, 2022 - 11:15 p.m.
CVE-2022-38529
cve-2022-38529
tinyexr
heap-buffer overflow
rleuncompress
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
34.8%
tinyexr commit 0647fb3 was discovered to contain a heap-buffer overflow via the component rleUncompress.
Affected configurations
Node
tinyexr_projecttinyexrMatch2022-06-28
| CPE | Name | Operator | Version |
|---|---|---|---|
| tinyexr_project:tinyexr | tinyexr project tinyexr | eq | 2022-06-28 |
References
Social References
More
Related
cvelist
cvelist
CVE-2022-38529
2022-09-06 21:08:27
debiancve
debiancve
CVE-2022-38529
2022-09-06 23:15:08
veracode
veracode
Buffer Overflow
2022-09-07 10:08:50
ubuntucve
ubuntucve
CVE-2022-38529
2022-09-06 00:00:00
nvd
nvd
CVE-2022-38529
2022-09-06 23:15:08
prion
prion
Heap overflow
2022-09-06 23:15:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
34.8%
Related for CVE-2022-38529