CVE-2022-42920
CVSS v3.1
9.8 (Critical)
EPSS
1.94 % (89th)
Affected Products
2
Advisories
16
Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those APIs, giving the attacker more control over the resulting bytecode than otherwise expected. Update to Apache Commons BCEL 6.6.0.
Weaknesses
- CWE-787
- Out-of-bounds Write
- CVE Status
- PUBLISHED
- CNA
- Apache Software Foundation
- Published Date
-
2022-11-07 13:15:10
(22 months ago) - Updated Date
-
2024-01-17 15:15:09
(8 months ago)
Affected Products
Loading...
Loading...
Configuration #1
|
Configuration #2
|
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...