CVE-2022-30540
02.06.2022, 14:15
The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary codeEnginsight
| Vendor | Product | Version |
|---|---|---|
| hornerautomation | cscape | 𝑥 < 9.90 |
| hornerautomation | cscape | 9.90 |
| hornerautomation | cscape | 9.90:sp1 |
| hornerautomation | cscape | 9.90:sp2 |
| hornerautomation | cscape | 9.90:sp3 |
| hornerautomation | cscape | 9.90:sp4 |
| hornerautomation | cscape | 9.90:sp5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-122 - Heap-based Buffer OverflowA heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
- CWE-824 - Access of Uninitialized PointerThe program accesses or uses a pointer that has not been initialized.