CVE-2022-32962CWE-415

HiCOS’ client-side citizen digital certificate - Double Free

Medium · published July 20, 2022

CVSS v3.1
6.8
EPSS
0%
Percentile
13.1
In the wild
Unconfirmed
What it is

HiCOS’ client-side citizen certificate component has a double free vulnerability. An unauthenticated physical attacker can exploit this vulnerability to corrupt memory and execute arbitrary code, manipulate system data or terminate service.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00230 · 13.1th percentile
Weakness
CWE-415 · Double Free
Published
2022-07-20T02:03Z
EPSS history
Timeline
  • 20 JUL 02:03Z
    HiCOS’ client-side citizen digital certificate - Double Free
    cvelistv5