CVE-2022-26459

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

In vow, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032634; Issue ID: ALPS07032634.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Sep 6, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-26466.1A vulnerability, which was classified as problematic, was found in SourceCodester Online Admission System. Affected is an unknown function oCVE-2022-264606.7In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with SystCVE-2022-264616.7In vow, there is a possible undefined behavior due to an API misuse. This could lead to local escalation of privilege with System execution CVE-2022-264624.4In vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with SystemCVE-2022-264634.4In vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with SystemCVE-2022-264646.7In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with SystCVE-2022-264656.7In audio ipi, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege witCVE-2022-264666.7In audio ipi, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with SystCVE-2022-264676.7In rpmb, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with SysCVE-2022-264686.6In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege,CVE-2022-264697.8In MtkEmail, there is a possible escalation of privilege due to fragment injection. This could lead to local escalation of privilege with noCVE-2022-26479.8A vulnerability was found in jeecg-boot. It has been declared as critical. This vulnerability affects unknown code of the file /api/. The ma
CVE-2022-26459: Medium severity, CVSS 4.4 | Vulnix