Pypy
1 CVEs
product
Monthly
The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
PHP
RCE
Buffer Overflow
Python
Integer Overflow
+8
NVD
GitHub
CVSS 3.1
9.8
EPSS
5.2%
CVE-2022-37454
LIB
EPSS 5%
CVSS 9.8
CRITICAL
POC
PATCH
Act Now
The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
PHP
RCE
Buffer Overflow
+10
NVD
GitHub