CVE-2022-26437

CRITICAL Year: 2022
CVSS v3 Score
9.8
Critical
Weakness Type
CWE-908
View all →

Vulnerability Description

In httpclient, there is a possible out of bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WSAP00103831; Issue ID: WSAP00103831.

Related Vulnerabilities

CVE-2008-0081

CRITICAL
CVSS:9.8(Critical)

Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted macros, aka "Ma...

CWE-9082008

CVE-2015-8390

CRITICAL
CVSS:9.8(Critical)

PCRE before 8.38 mishandles the [: and \\ substrings in character classes, which allows remote attackers to cause a denial of service (uninitialized memory read) or possibly have unspecified other imp...

CWE-9082015

CVE-2018-25014

CRITICAL
CVSS:9.8(Critical)

A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().

CWE-9082018

CVE-2019-0006

CRITICAL
CVSS:9.8(Critical)

A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwarding Engine manager (fxpc) on all EX, QFX and MX Series devices in a Virtual Cha...

CWE-9082019

CVE-2019-12730

CRITICAL
CVSS:9.8(Critical)

aa_read_header in libavformat/aadec.c in FFmpeg before 3.2.14 and 4.x before 4.1.4 does not check for sscanf failure and consequently allows use of uninitialized variables.

CWE-9082019

CVE-2019-14052

CRITICAL
CVSS:9.8(Critical)

u'Accessing an uninitialized data structure could result in partially copying of contents and thus incorrect processing' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Ind...

CWE-9082019