CVE-2022-0699

2022-10-1700:00:00

CWE-416

fedora

www.cve.org

double-free

shapelib

denial of service

malloc

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.2%

JSON

A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attacker to cause a denial of service or have other unspecified impact via control over malloc.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "shapelib",
    "versions": [
      {
        "version": "shapelib 1.5.0 and older releases",
        "status": "affected"
      }
    ]
  }
]