CVE-2022-35014: advancecomp vulnerabilities It was discovered that AdvanceCOMP did not properly manage memory while performing read operations on MNG file. If a user were…

medium5.5CVSS 3.1

AVLACLPRNUIRSUCNINAH

EPSS

0.43%

34.7th percentile

advancecomp vulnerabilities It was discovered that AdvanceCOMP did not properly manage memory while performing read operations on MNG file. If a user were tricked into opening a specially crafted MNG file, a remote attacker could possibly use this issue to cause AdvanceCOMP to crash, resulting in a denial of service. (CVE-2022-35014, CVE-2022-35017, CVE-2022-35018, CVE-2022-35019, CVE-2022-35020) It was discovered that AdvanceCOMP did not properly manage memory while performing read operations on ZIP file. If a user were tricked into opening a specially crafted ZIP file, a remote attacker could possibly use this issue to cause AdvanceCOMP to crash, resulting in a denial of service. (CVE-2022-35015, CVE-2022-35016)

Affected

5 ranges

Vendor	Product	Version range	Fixed in
advancemame	advancecomp	>= 0 < 2.1-1ubuntu0.18.04.3	2.1-1ubuntu0.18.04.3
advancemame	advancecomp	>= 0 < 2.1-2.1ubuntu0.20.04.1	2.1-2.1ubuntu0.20.04.1
advancemame	advancecomp	>= 0 < 2.1-2.1ubuntu2.1	2.1-2.1ubuntu2.1
advancemame	advancecomp	>= 0 < 1.20-1ubuntu0.2+esm2	1.20-1ubuntu0.2+esm2
debian	advancecomp	< advancecomp 2.4-1 (bookworm)	advancecomp 2.4-1 (bookworm)

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

osv5.5MEDIUM

vendor_debian5.5LOW

vendor_redhat5.5MEDIUM

vendor_ubuntu5.5MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.