CVE-2022-34264

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Adobe FrameMaker versions 2019 Update 8 (and earlier) and 2020 Update 4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Aug 11, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-342659.8An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL in CVE-2022-342665.5The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service (application crash), a di CVE-2022-342679.8An issue was discovered in RWS WorldServer before 11.7.3. Adding a token parameter with the value of 02 bypasses all authentication requirem CVE-2022-342689.8An issue was discovered in RWS WorldServer before 11.7.3. /clientLogin deserializes Java objects without authentication, leading to command CVE-2022-342698.8An issue was discovered in RWS WorldServer before 11.7.3. An authenticated, remote attacker can perform a ws-legacy/load_dtd?system_id= blin CVE-2022-34276.5The Corner Ad plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.56. This is due to miss CVE-2022-342709.8An issue was discovered in RWS WorldServer before 11.7.3. Regular users can create users with the Administrator role via UserWSUserManager.CVE-2022-342718.8A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem. This issue affects Apache CVE-2022-342727.8A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds CVE-2022-342737.8A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write pa CVE-2022-342747.8A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write pa CVE-2022-342757.8A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write pa