Vulnerability CVE-2022-36227


Published: 2022-11-22

Description:
In libarchive 3.6.1, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference or, in some cases, even arbitrary code execution.

 References:
https://github.com/libarchive/libarchive/issues/1754

Copyright 2024, cxsecurity.com

 

Back to Top