CVE-2022-28488

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The function wav_format_write in libwav.c in libwav through 2017-04-20 has an Use of Uninitialized Variable vulnerability.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-908

Affected software

No affected versions have been published.

Timeline

Published
May 4, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-28497.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220.CVE-2022-284919.8TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the host_name CVE-2022-284929.8TOTOLINK Technology CPE with firmware V6.3c.566 ,allows remote attackers to bypass Login.CVE-2022-284939.8A vulnerability in TOTOLINK CP900 V6.3c.566 allows attackers to start the Telnet service,CVE-2022-284949.8TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setUpgradeFW function via tCVE-2022-284959.8TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via CVE-2022-284969.8TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 discovered to contain a command injection vulnerability in the setPasswordCfg function via thCVE-2022-284979.8TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the mtd_write_bootloader functiCVE-2022-28506.5A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer derefereCVE-2022-285057.2Jfinal_cms 5.1.0 is vulnerable to SQL Injection via com.jflyfox.system.log.LogController.java.CVE-2022-285065.5There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45.CVE-2022-285074.8Dragon Path Technologies Bharti Airtel Routers Hardware BDT-121 version 1.0 is vulnerable to Cross Site Scripting (XSS) via Dragon path rout
CVE-2022-28488: High severity, CVSS 7.5 | Vulnix