CVE-2022-1122

MEDIUM Year: 2022
CVSS v3 Score
5.5
Medium
CVSS v2 Score
4.3
Medium
Weakness Type
CWE-665
View all →

Vulnerability Description

A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free() on an uninitialized pointer, leading to a segmentation fault and a denial of service.

Related Vulnerabilities

CVE-2010-4343

MEDIUM
CVSS:5.5(Medium)

drivers/scsi/bfa/bfa_core.c in the Linux kernel before 2.6.35 does not initialize a certain port data structure, which allows local users to cause a denial of service (system crash) via read operation...

CWE-6652010

CVE-2010-4655

MEDIUM
CVSS:5.5(Medium)

net/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize certain data structures, which allows local users to obtain potentially sensitive information from kernel heap memory by levera...

CWE-6652010

CVE-2014-8181

MEDIUM
CVSS:5.5(Medium)

The kernel in Red Hat Enterprise Linux 7 and MRG-2 does not clear garbage data for SG_IO buffer, which may leaking sensitive information to userspace.

CWE-6652014

CVE-2017-0641

MEDIUM
CVSS:5.5(Medium)

A remote denial of service vulnerability in libvpx in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to...

CWE-6652017

CVE-2017-0735

MEDIUM
CVSS:5.5(Medium)

A denial of service vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38239864.

CWE-6652017

CVE-2017-13649

MEDIUM
CVSS:5.5(Medium)

UnrealIRCd 4.0.13 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root accoun...

CWE-6652017