CVE-2022-48554 — Out-of-bounds Read in Project File

CWE-125 — Out-of-bounds Read12 documents9 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 93.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
File Project FileDebian Linux
Timeline
PublishedAug 22
Latest updateMar 7

Description

File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶Debianfile_project/file< 1:5.39-3+deb11u1+3

Also affects: Debian Linux 11.0

🔴Vulnerability Details

3
CVEList
CVE-2022-48554: File before 5↗2023-08-22
▶
OSV
CVE-2022-48554: File before 5↗2023-08-22
▶
GHSA
GHSA-wpfg-7xq2-mv49: File before 5↗2023-08-22
▶

📋Vendor Advisories

8
Apple
CVE-2022-48554: tvOS 17.4↗2024-03-07
▶
Apple
CVE-2022-48554: watchOS 10.4↗2024-03-07
▶
Apple
CVE-2022-48554: macOS Sonoma 14.4↗2024-03-07
▶
Apple
CVE-2022-48554: iOS 17.4 and iPadOS 17.4↗2024-03-05
▶
Ubuntu
file vulnerability↗2023-09-12
▶
CVE-2022-48554 — Out-of-bounds Read in Project File | cvebase