CVE-2022-48225

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. It is used to install drivers from several different vendors. The Gemalto Document Reader child installation process is vulnerable to DLL hijacking, because it attempts to execute (with elevated privileges) multiple non-existent DLLs out of a non-existent standard-user writable location.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

No affected versions have been published.

Timeline

Published: Apr 4, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-482267.8An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During installation, an EXE gets executed out of C:\Windows\Temp. A standa CVE-2022-482277.8An issue was discovered in Acuant AsureID Sentinel before 5.2.149. It allows elevation of privileges because it opens Notepad after the inst CVE-2022-482285.5An issue was discovered in Acuant AsureID Sentinel before 5.2.149. It uses the root of the C: drive for the i-Dentify and Sentinel Installer CVE-2022-48235.9A vulnerability, which was classified as problematic, was found in InSTEDD Nuntium. Affected is an unknown function of the file app/controll CVE-2022-482307.5There is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to DoS.CVE-2022-482315.5In soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution priv CVE-2022-482325.5In FM service , there is a possible missing params check. This could lead to local denial of service in FM service .CVE-2022-482335.5In FM service , there is a possible missing params check. This could lead to local denial of service in FM service .CVE-2022-482345.5In FM service , there is a possible missing params check. This could lead to local denial of service in FM service .CVE-2022-482354.4In MP3 encoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with Syste CVE-2022-482364.4In MP3 encoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System CVE-2022-482374.4In Image filter, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with Syst