PT-2022-18489

CVE-2022-27569

·

Published

2022-04-11

·

Updated

2022-04-18

Description by

CVSS 2.0
10
Critical
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions libsimba library versions prior to SMR Apr-2022 Release 1
Description The issue is a heap-based buffer overflow vulnerability in the parser infe function. This allows a remote attacker to execute code.
Recommendations For versions prior to SMR Apr-2022 Release 1, update to SMR Apr-2022 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the parser infe function in the libsimba library until a patch is available.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾