CVE-2022-21147

Katalog CVE

CVSS 5.5 · Medium EPSS 0,67%

Kerentanan Use of Out-of-range Pointer Offset pada estsoft alyac. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

An out of bounds read vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.7.7. A specially-crafted PE file can trigger this vulnerability to cause denial of service and termination of malware scan. An attacker can provide a malicious file to trigger this vulnerability.

Rincian

Terbit di NVD

12 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-823: Use of Out-of-range Pointer Offset
CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,67% peluang dieksploitasi; lebih tinggi dari 50,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.estsecurity.com/public/product/alyac product · advisory vendor
• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1452 exploit · advisory pihak ketiga