CVE-2022-29794

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The frame scheduling module has a Use After Free (UAF) vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published: May 13, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-297957.5The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kern CVE-2022-297967.5The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability w CVE-2022-297979.8There is a buffer overflow vulnerability in CV81-WDM FW 01.70.49.29.46. Successful exploitation of this vulnerability may lead to privilege CVE-2022-297987.5There is a denial of service vulnerability in CV81-WDM FW versions 01.70.49.29.46. Successful exploitation could cause denial of service.CVE-2022-297995.5A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the Adminis CVE-2022-29805.5NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259.CVE-2022-298004.7A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. This flaw exists because there is a cert CVE-2022-298017.5A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter V13.0 (All versions < V13.0.0.9). The applic CVE-2022-298047.5Incorrect conversion of certain invalid paths to valid, absolute paths in Clean in path/filepath before Go 1.17.11 and Go 1.18.3 on Windows CVE-2022-298059.8A Java Deserialization vulnerability in the Fishbowl Server in Fishbowl Inventory before 2022.4.1 allows remote attackers to execute arbitra CVE-2022-298069.8ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname CVE-2022-298079.8A SQL injection vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.0 that can allow for remote code execut