CVE-2022-27574

Name of the Vulnerable Software and Affected Versions libsimba library versions prior to SMR Apr-2022 Release 1

Description The issue is related to improper input validation in the parser iloc and sheifd find itemIndexin functions, allowing a privileged attacker to perform an out of bounds write.

Recommendations For versions prior to SMR Apr-2022 Release 1, update to the SMR Apr-2022 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the parser iloc and sheifd find itemIndexin functions until a patch is available.