PT-2022-18495
CVE-2022-27574
·
تاريخ النشر
2022-04-11
·
تاريخ التحديث
2022-04-18
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
libsimba library versions prior to SMR Apr-2022 Release 1
Description
The issue is related to improper input validation in the
parser iloc and sheifd find itemIndexin functions, allowing a privileged attacker to perform an out of bounds write.Recommendations
For versions prior to SMR Apr-2022 Release 1, update to the SMR Apr-2022 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the
parser iloc and sheifd find itemIndexin functions until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾