What’s Vulnerable › Vulnerabilities

CVE-2022-48554

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-08-22 · updated 2026-06-17
• Weakness: CWE-125

Description

File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c. NOTE: "File" is the name of an Open Source project.

Affected products

• Debian Linux: 11.0
• File Project File: 5.41

References

• http://seclists.org/fulldisclosure/2024/Mar/21
• http://seclists.org/fulldisclosure/2024/Mar/24
• http://seclists.org/fulldisclosure/2024/Mar/25
• https://bugs.astron.com/view.php?id=310
• https://security.netapp.com/advisory/ntap-20231116-0002/
• https://support.apple.com/kb/HT214081
• https://support.apple.com/kb/HT214084
• https://support.apple.com/kb/HT214086
• https://support.apple.com/kb/HT214088
• https://www.debian.org/security/2023/dsa-5489
• http://seclists.org/fulldisclosure/2024/Mar/21
• http://seclists.org/fulldisclosure/2024/Mar/24

Get alerted when CVE-2022-48554 or the next vulnerability affects your stack