What is the CVSS score of CVE-2022-35014?

CVE-2022-35014 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.4%.

Is there a public PoC exploit available for CVE-2022-35014?

Yes, a public proof-of-concept exploit is available for CVE-2022-35014. Prioritise patching immediately. EPSS: 0.4%.

Advancecomp CVE-2022-35014

MEDIUM

2022-08-29 cve@mitre.org

Information Disclosure Advancecomp Fedora

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVE Published

Aug 29, 2022 - 14:15 nvd

MEDIUM 5.5

DescriptionNVD

Advancecomp v2.3 contains a segmentation fault.

AnalysisAI

Advancecomp v2.3 contains a segmentation fault. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

Affected products include: Advancemame Advancecomp, Fedoraproject Fedora.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Advancecomp

View all

CVE-2019-9210 HIGH This Week POC

7.8 Feb 27

In AdvanceCOMP 2.1, png_compress in pngex.cc in advpng has an integer overflow upon encountering an invalid PNG size, wh

CVE-2019-8383 HIGH This Week POC

7.8 Feb 17

An issue was discovered in AdvanceCOMP through 2.1. Rated high severity (CVSS 7.8), this vulnerability is no authenticat

CVE-2019-8379 HIGH This Week POC

7.8 Feb 17

An issue was discovered in AdvanceCOMP through 2.1. Rated high severity (CVSS 7.8), this vulnerability is no authenticat

CVE-2018-1056 HIGH This Week POC

7.8 Jul 27

An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP fil

CVE-2022-35020 MEDIUM This Month POC

5.5 Aug 29

Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_c

CVE-2022-35019 MEDIUM This Month POC

5.5 Aug 29

Advancecomp v2.3 was discovered to contain a segmentation fault. Rated medium severity (CVSS 5.5), this vulnerability is

CVE-2022-35018 MEDIUM This Month POC

5.5 Aug 29

Advancecomp v2.3 was discovered to contain a segmentation fault. Rated medium severity (CVSS 5.5), this vulnerability is

CVE-2022-35017 MEDIUM This Month POC

5.5 Aug 29

Advancecomp v2.3 was discovered to contain a heap buffer overflow. Rated medium severity (CVSS 5.5), this vulnerability

CVE-2022-35016 MEDIUM This Month POC

5.5 Aug 29

Advancecomp v2.3 was discovered to contain a heap buffer overflow. Rated medium severity (CVSS 5.5), this vulnerability

CVE-2022-35015 MEDIUM This Month POC

5.5 Aug 29

Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h. Rated medium se

CVE-2023-2961 LOW Monitor

3.3 Jun 06

A segmentation fault flaw was found in the Advancecomp package. Rated low severity (CVSS 3.3), this vulnerability is low

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2022-35014 vulnerability details – vuln.today

Back

Advancecomp CVE-2022-35014

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

More in Advancecomp

Same technique Information Disclosure

Share

External POC / Exploit Code