Security Vulnerabilities - CVEs Published In April 2022
Null pointer dereference vulnerability in parser_unknown_property function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker.
CVSS Score
5.9
EPSS Score
0.003
Published
2022-04-11
Heap-based buffer overflow vulnerability in sheifd_create function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attackers.
CVSS Score
8.1
EPSS Score
0.012
Published
2022-04-11
Null pointer dereference vulnerability in parser_infe function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds read by remote attackers.
CVSS Score
5.9
EPSS Score
0.003
Published
2022-04-11
A maliciously crafted DWFX and SKP files in Autodesk Navisworks 2022 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.
CVSS Score
7.8
EPSS Score
0.007
Published
2022-04-11
Null pointer dereference vulnerability in parser_hvcC function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attackers.
CVSS Score
5.9
EPSS Score
0.003
Published
2022-04-11
Heap-based buffer overflow vulnerability in parser_iloc function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
CVSS Score
8.1
EPSS Score
0.012
Published
2022-04-11
Heap-based buffer overflow vulnerability in parser_infe function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
CVSS Score
8.1
EPSS Score
0.012
Published
2022-04-11
Heap-based buffer overflow vulnerability in parser_single_iref function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
CVSS Score
8.1
EPSS Score
0.012
Published
2022-04-11
Heap-based buffer overflow vulnerability in sheifd_get_info_image function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
CVSS Score
8.1
EPSS Score
0.012
Published
2022-04-11
Heap-based buffer overflow vulnerability in parser_ipma function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attackers.
CVSS Score
8.1
EPSS Score
0.012
Published
2022-04-11