Lucene search

K
cvelistIcscertCVELIST:CVE-2022-2947
HistoryDec 13, 2022 - 8:31 p.m.

CVE-2022-2947

2022-12-1320:31:17
CWE-119
icscert
www.cve.org
altair hyperview player
memory buffer
vulnerability

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

36.7%

Altair HyperView PlayerΒ versions 2021.1.0.27 and prior perform operations on a memory buffer but can read from or write to a memory location outside of the intended boundary of the buffer. This hits initially as a read access violation, leading to a memory corruption situation.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "HyperView Player",
    "vendor": "Altair",
    "versions": [
      {
        "lessThanOrEqual": "2021.1.0.27",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

36.7%

Related for CVELIST:CVE-2022-2947