CVE-2022-26474

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

In sensorhub, there is a possible out of bounds write due to an incorrect calculation of buffer size. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07129717; Issue ID: ALPS07129717.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-131

Affected software

No affected versions have been published.

Timeline

Published: Oct 7, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-264756.7In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2022-264768.8A vulnerability has been identified in Spectrum Power 4 (All versions using Shared HIS), Spectrum Power 7 (All versions using Shared HIS), S CVE-2022-264777.5The Security Team noticed that the termination condition of the for loop in the readExternal method is a controllable variable, which, if ta CVE-2022-264799.8An issue was discovered in Poly EagleEye Director II before 2.2.2.1. Existence of a certain file (which can be created via an rsync backdoor CVE-2022-26489.8A vulnerability was found in SourceCodester Multi Language Hotel Management Software. It has been rated as critical. This issue affects some CVE-2022-264818.8An issue was discovered in Poly Studio before 3.7.0. Command Injection can occur via the CN field of a Create Certificate Signing Request (C CVE-2022-264827.2An issue was discovered in Poly EagleEye Director II before 2.2.2.1. os.system command injection can be achieved by an admin.CVE-2022-264834.8An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2 Patch 600 and 8.x before 8.0.0 Patch 100. A reflected cr CVE-2022-264844.9An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2 Patch 600 and 8.x before 8.0.0 Patch 100. The web server CVE-2022-264858.8Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild ab CVE-2022-264869.6An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of atta CVE-2022-264887.0In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow