CVE-2022-25147CWE-190

Apache Portable Runtime Utility (APR-util): out-of-bounds writes in the apr_base64 family of functions

published January 31, 2023

CVSS
—
EPSS
1%
Percentile
72.6
In the wild
Unconfirmed
What it is

Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer.

This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and prior versions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01417 · 72.6th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2023-01-31T15:54Z
EPSS history
Timeline
  • 31 JAN 15:54Z
    Apache Portable Runtime Utility (APR-util): out-of-bounds writes in the apr_base64 family of functions
    cvelistv5