CVE-2022-21202

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The affected product is vulnerable to an out-of-bounds read, which may result in disclosure of sensitive information.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Apr 12, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-212037.8Improper permissions in the SafeNet Sentinel driver for Intel(R) Quartus(R) Prime Standard Edition before version 21.1 may allow an authentiCVE-2022-212047.8Improper permissions for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escCVE-2022-212057.5Improper restriction of XML external entity reference in DSP Builder Pro for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may aCVE-2022-212087.5The package node-opcua before 2.74.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks CVE-2022-212097.8The affected product is vulnerable to an out-of-bounds read while processing project files, which allows an attacker to craft a project fileCVE-2022-21216.5OFFIS DCMTK's (All versions prior to 3.6.7) has a NULL pointer dereference vulnerability while processing DICOM files, which may result in aCVE-2022-212108.8An SQL injection vulnerability exists in the AssetActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP reqCVE-2022-212117.5This affects all versions of package posix. When invoking the toString method, it will fallback to 0x0 value, as the value of toString is noCVE-2022-212126.5Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of CVE-2022-212137.5This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixInCVE-2022-212147.8The affected product is vulnerable to a heap-based buffer overflow, which may lead to code execution.CVE-2022-212159.8This vulnerability could allow an attacker to force the server to create and execute a web request granting access to backend APIs that are