CVE-2022-48478

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The facial recognition TA of some products lacks memory length verification. Successful exploitation of this vulnerability may cause exceptions of the facial recognition service.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
May 26, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-484799.8The facial recognition TA of some products has the out-of-bounds memory read vulnerability. Successful exploitation of this vulnerability maCVE-2022-48485.7Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-484807.5Integer overflow vulnerability in some phones. Successful exploitation of this vulnerability may affect service confidentiality.CVE-2022-484817.8In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possibleCVE-2022-484827.53CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /ElectrCVE-2022-484837.53CX before 18 Hotfix 1 build 18.0.3.461 on Windows allows unauthenticated remote attackers to read %WINDIR%\system32 files via /Electron/dowCVE-2022-484867.5Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.CVE-2022-484877.5Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.CVE-2022-484885.3Vulnerability of bypassing the default desktop security controls.Successful exploitation of this vulnerability may cause unauthorized modifiCVE-2022-484897.5Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.CVE-2022-48496.5Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-484907.5Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.
CVE-2022-48478: Critical severity, CVSS 9.8 | Vulnix