CVE-2022-26437

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In httpclient, there is a possible out of bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WSAP00103831; Issue ID: WSAP00103831.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-908

Affected software

No affected versions have been published.

Timeline

Published
Aug 1, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-264386.7In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege withCVE-2022-264396.7In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege withCVE-2022-26449.8A vulnerability was found in SourceCodester Online Admission System and classified as critical. This issue affects some unknown processing oCVE-2022-264406.7In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege withCVE-2022-264416.7In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege withCVE-2022-264426.7In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege withCVE-2022-264436.7In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege withCVE-2022-264446.7In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege withCVE-2022-264456.7In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege withCVE-2022-264467.5In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of service, when concatCVE-2022-264479.8In BT firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no addiCVE-2022-264486.7In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with Syst
CVE-2022-26437: Critical severity, CVSS 9.8 | Vulnix