What’s Vulnerable › Vulnerabilities

CVE-2022-37290

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-11-14 · updated 2026-06-17
• Weakness: CWE-476

Description

GNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive.

Affected products

• Fedoraproject Fedora: 36, 37
• GNOME Nautilus: 42.2

References

• https://gitlab.gnome.org/GNOME/nautilus/-/issues/2376
• https://gitlab.gnome.org/GNOME/nautilus/-/merge_requests/1001
• https://gitlab.gnome.org/GNOME/nautilus/-/tree/master
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PX5CVF4FAHFA6UNKHFBBLOP2NUMIQJAY/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XYPDZ7LBBUVU3WFK7DCGDFGK2GXTKGT5/
• https://gitlab.gnome.org/GNOME/nautilus/-/issues/2376
• https://gitlab.gnome.org/GNOME/nautilus/-/merge_requests/1001
• https://gitlab.gnome.org/GNOME/nautilus/-/tree/master
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PX5CVF4FAHFA6UNKHFBBLOP2NUMIQJAY/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XYPDZ7LBBUVU3WFK7DCGDFGK2GXTKGT5/

Get alerted when CVE-2022-37290 or the next vulnerability affects your stack