CVE-2022-34286

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted PCB files. This could allow an attacker to execute code in the context of the current process. (FG-VD-22-051)

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Jul 12, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-342875.5A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a stack corruption vulnerCVE-2022-342885.5A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds CVE-2022-342897.8A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write paCVE-2022-34296.5A denial-of-service vulnerability was found in the firmware used in Lenovo printers, where users send illegal or malformed strings to an opeCVE-2022-342905.5A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a stack corruption vulnerCVE-2022-342915.5A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a stack corruption vulnerCVE-2022-342927.1Docker Desktop for Windows before 4.6.0 allows attackers to overwrite any file through a symlink attack on the hyperv/create dockerBackendV2CVE-2022-342937.5wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped.CVE-2022-342949.8totd 1.5.3 uses a fixed UDP source port in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enouCVE-2022-342956.5totd before 1.5.3 does not properly randomize mesg IDs.CVE-2022-342967.5In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request.CVE-2022-342975.4Yii Yii2 Gii through 2.2.4 allows stored XSS by injecting a payload into any field.