CVE-2022-36146

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

SWFMill commit 53d7690 was discovered to contain a memory allocation issue via operator new[](unsigned long) at asan_new_delete.cpp.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-770

Affected software

No affected versions have been published.

Timeline

Published
Aug 16, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-361485.5fdkaac commit 53fe239 was discovered to contain a floating point exception (FPE) via wav_open at /src/wav_reader.c.CVE-2022-361495.5tifig v0.2.2 was discovered to contain a heap-use-after-free via temInfoEntry().CVE-2022-361505.5tifig v0.2.2 was discovered to contain a heap-buffer overflow via __asan_memmove at /asan/asan_interceptors_memintrinsics.cpp.CVE-2022-361515.5tifig v0.2.2 was discovered to contain a segmentation violation via getType() at /common/bbox.cpp.CVE-2022-361525.5tifig v0.2.2 was discovered to contain a memory leak via operator new[](unsigned long) at /asan/asan_new_delete.cpp.CVE-2022-361535.5tifig v0.2.2 was discovered to contain a segmentation violation via std::vector<unsigned int, std::allocator<unsigned int> >::size() const aCVE-2022-361555.5tifig v0.2.2 was discovered to contain a resource allocation issue via operator new(unsigned long) at asan_new_delete.cpp.CVE-2022-361578.8XXL-JOB all versions as of 11 July 2022 are vulnerable to Insecure Permissions resulting in the ability to execute admin function with low PCVE-2022-361588.0Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actoCVE-2022-361598.8Contec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for root stored in the component /etc/shadow. AsCVE-2022-36167.5Attackers can create long chains of CAs that would lead to OctoRPKI exceeding its max iterations parameter. In consequence it would cause thCVE-2022-361619.8Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter.
CVE-2022-36146: Medium severity, CVSS 5.5 | Vulnix