CVE-2022-34288

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application is vulnerable to an out of bounds read past the end of an allocated buffer when parsing PCB files. An attacker could leverage this vulnerability to leak information in the context of the current process. (FG-VD-22-053)

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Jul 12, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-342897.8A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains an out of bounds write pa CVE-2022-34296.5A denial-of-service vulnerability was found in the firmware used in Lenovo printers, where users send illegal or malformed strings to an ope CVE-2022-342905.5A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a stack corruption vulner CVE-2022-342915.5A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a stack corruption vulner CVE-2022-342927.1Docker Desktop for Windows before 4.6.0 allows attackers to overwrite any file through a symlink attack on the hyperv/create dockerBackendV2 CVE-2022-342937.5wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped.CVE-2022-342949.8totd 1.5.3 uses a fixed UDP source port in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enou CVE-2022-342956.5totd before 1.5.3 does not properly randomize mesg IDs.CVE-2022-342967.5In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request.CVE-2022-342975.4Yii Yii2 Gii through 2.2.4 allows stored XSS by injecting a payload into any field.CVE-2022-342985.3The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."CVE-2022-342998.1There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarf_global_formref_b.