How severe is CVE-2022-23090?

This vulnerability has a severity rating of HIGH with a CVSS score of 7.7 out of 10.

What type of vulnerability is CVE-2022-23090?

This is classified as CWE-416, which is a common weakness in software security.

CVE-2022-23090

HIGH Year: 2022

CVSS v3 Score

7.7

High

Weakness Type

CWE-416

View all →

Vulnerability Description

The aio_aqueue function, used by the lio_listio system call, fails to release a reference to a credential in an error case. An attacker may cause the reference count to overflow, leading to a use after free (UAF).

CVE-2021-47356

HIGH

CVSS:7.7(High)

In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible use-after-free in HFC_cleanup() This module's remove path calls del_timer(). However, that function does not wai...

CWE-4162021

CVE-2022-1071

HIGH

CVSS:7.7(High)

User after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.

CWE-4162022

CVE-2009-0749

HIGH

CVSS:7.8(High)

Use-after-free vulnerability in the GIFReadNextExtension function in lib/pngxtern/gif/gifread.c in OptiPNG 0.6.2 and earlier allows context-dependent attackers to cause a denial of service (applicatio...

CWE-4162009

CVE-2009-4324

HIGH

CVSS:7.8(High)

Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, allows remote attackers to exec...

CWE-4162009