Lucene search

[email protected]CVE-2022-39891

HistoryNov 09, 2022 - 10:15 p.m.

CVE-2022-39891

2022-11-0922:15:18

CWE-787

CWE-125

[email protected]

web.nvd.nist.gov

cve-2022-39891

heap overflow

vulnerability

editor lite

nvd

information security

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

41.9%

JSON

Heap overflow vulnerability in parse_pce function in libsavsaudio.so in Editor Lite prior to version 4.0.41.3 allows attacker to get information.

Affected configurations

NVD

Node

samsungeditor_liteRange<4.0.41.3

CPENameOperatorVersion
samsung:editor_litesamsung editor litelt4.0.41.3

CPE	Name	Operator	Version
samsung:editor_lite	samsung editor lite	lt	4.0.41.3

CNA Affected

[
  {
    "vendor": "Samsung Mobile",
    "product": "Editor Lite",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "4.0.41.3",
        "versionType": "custom"
      }
    ]
  }
]

References

security.samsungmobile.com/serviceWeb.smsb?year=2022&month=11

Social References

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

41.9%

JSON

Related for CVE-2022-39891

nvd1 prion1 cvelist1