What’s Vulnerable › Vulnerabilities

CVE-2022-36647

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-09-02 · updated 2026-06-17
• Weakness: CWE-120

Description

PKUVCL davs2 v1.6.205 was discovered to contain a global buffer overflow via the function parse_sequence_header() at source/common/header.cc:269.

Affected products

• Davs2 Project Davs2: 1.6.205

References

• https://github.com/pkuvcl/davs2/issues/29
• https://github.com/pkuvcl/davs2/issues/29

Get alerted when CVE-2022-36647 or the next vulnerability affects your stack