What’s Vulnerable › Vulnerabilities

CVE-2022-4964

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-01-24 · updated 2026-06-17
• Weakness: CWE-276

Description

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set.

Affected products

• Canonical Ltd. Ubuntu pipewire-pulse: all versions

References

• https://bugs.launchpad.net/ubuntu/+source/pipewire/+bug/1995707/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4964
• https://gitlab.freedesktop.org/pipewire/pipewire/-/merge_requests/1779
• https://gitlab.freedesktop.org/pipewire/wireplumber/-/merge_requests/567
• https://bugs.launchpad.net/ubuntu/+source/pipewire/+bug/1995707/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4964
• https://gitlab.freedesktop.org/pipewire/pipewire/-/merge_requests/1779
• https://gitlab.freedesktop.org/pipewire/wireplumber/-/merge_requests/567

Get alerted when CVE-2022-4964 or the next vulnerability affects your stack