VULNERABILITY INTELLIGENCE

CVE-2022-28886

CVSS score4.3 MEDIUM
EPSS probability0.47%
CISA KEVNot currently listed
Published2022-09-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L

Description

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.so/aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine

Weakness classification

  • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

Primary references