CVE-2022-21154

Summary

An integer overflow vulnerability exists in the fltSaveCMP functionality of Leadtools 22. A specially-crafted BMP file can lead to an integer overflow, that in turn causes a buffer overflow. An attacker can provide a malicious BMP file to trigger this vulnerability.

Affected Software

Weaknesses

• CWE-190: CWE-190: Integer Overflow or Wraparound

ADP Enrichment

CVE Program Container

Additional References

• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1464
• https://files.leadtools.com/index.php/s/joFz7BcCZYMot5Q

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1464
• https://files.leadtools.com/index.php/s/joFz7BcCZYMot5Q

• ←Previous
• Next→