CVE-2022-26470

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In aie, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07116037; Issue ID: ALPS07116037.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Sep 6, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-264717.8In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege CVE-2022-264727.8In ims, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with n CVE-2022-264736.7In vdec fmt, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execut CVE-2022-264746.7In sensorhub, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of CVE-2022-264756.7In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2022-264768.8A vulnerability has been identified in Spectrum Power 4 (All versions using Shared HIS), Spectrum Power 7 (All versions using Shared HIS), S CVE-2022-264777.5The Security Team noticed that the termination condition of the for loop in the readExternal method is a controllable variable, which, if ta CVE-2022-264799.8An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Existence of a certain file (which can be created via an rsync backdoor CVE-2022-26489.8A vulnerability was found in SourceCodester Multi Language Hotel Management Software. It has been rated as critical. This issue affects some CVE-2022-264818.8An issue was discovered in Poly Studio before 3.7.0. Command Injection can occur via the CN field of a Create Certificate Signing Request (C CVE-2022-264827.2An issue was discovered in Poly EagleEye Director II before 2.2.2.1. os.system command injection can be achieved by an admin.CVE-2022-264834.8An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2 Patch 600 and 8.x before 8.0.0 Patch 100. A reflected cr