CVE-2022-32293

Name of the Vulnerable Software and Affected Versions ConnMan versions 1.41 and earlier

Description The issue is related to a use-after-free in WISPR handling, which could be triggered by a man-in-the-middle attack against a WISPR HTTP query. This could lead to crashes or code execution. The vulnerability is associated with the implementation of WISPR support in the ConnMan connection manager, allowing a remote attacker to cause a denial of service or execute arbitrary code.

Recommendations For ConnMan versions 1.41 and earlier, as a temporary workaround, consider disabling WISPR handling until a patch is available. Restrict access to WISPR HTTP queries to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.