CVE-2022-38668

Name of the Vulnerable Software and Affected Versions Crow versions through 1.0+4

Description The issue is related to HTTP applications based on Crow, which may reveal potentially sensitive uninitialized data from stack memory when fulfilling a request for a static file smaller than 16 KB. This could allow a remote attacker to gain unauthorized access to protected information. The vulnerability is associated with a lack of protection for service data.

Recommendations For Crow versions through 1.0+4, consider updating to a version that fixes this issue, as the current version may reveal sensitive data from stack memory. At the moment, there is no information about a newer version that contains a fix for this vulnerability.