Lucene search

K
cveMitreCVE-2022-48332
HistoryJun 26, 2023 - 5:15 p.m.

CVE-2022-48332

2023-06-2617:15:09
CWE-190
mitre
web.nvd.nist.gov
22
widevine
trusted application
ta
cve-2022-48332
buffer overflow
integer overflow

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

65.1%

Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys file_name_len integer overflow and resultant buffer overflow.

Affected configurations

Nvd
Node
widevinetrusted_applicationRange5.0.05.1.1
VendorProductVersionCPE
widevinetrusted_application*cpe:2.3:a:widevine:trusted_application:*:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

65.1%

Related for CVE-2022-48332