CVE-2022-21147CWE-823
An out of bounds read vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.7.7
Medium · published May 12, 2022
What it is
An out of bounds read vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.7.7. A specially-crafted PE file can trigger this vulnerability to cause denial of service and termination of malware scan. An attacker can provide a malicious file to trigger this vulnerability.
The record
Technical detail
- CVSS v3.0
- 5.0 · MEDIUM
- Vector
- CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00670 · 51.4th percentile
- Weakness
- CWE-823 · Use of Out-of-range Pointer Offset
- Published
- 2022-05-12T17:01Z
EPSS history
Timeline