CVE-2022-37454
The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to
CVSS
9.8
Crítica
EPSS
7.4%
p95
KEV
—
Exploit Today
28
0-100
Publicado: 21 de out. de 2022 · Última mod.: 14 de out. de 2026 · CWE-190
5.8%EPSS · 30 dias7.4%
2026-10-172026-11-13
The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.
- csrc.nist.govhttps://csrc.nist.gov/projects/hash-functions/sha-3-project
- eprint.iacr.orghttps://eprint.iacr.org/2023/331
- github.comhttps://github.com/XKCP/XKCP/security/advisories/GHSA-6w4m-2xhg-2658
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2022/10/msg00041.html
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2022/11/msg00000.html
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3ALQ6BDDPX5HU5YBQOBMDVAA2TSGDKIJ/
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMIEXLMTW5GO36HTFFWIPB3OHZXCT3G4/
- mouha.behttps://mouha.be/sha-3-buffer-overflow/
- news.ycombinator.comhttps://news.ycombinator.com/item?id=33281106
- news.ycombinator.comhttps://news.ycombinator.com/item?id=35050307
- security.gentoo.orghttps://security.gentoo.org/glsa/202305-02
- www.debian.orghttps://www.debian.org/security/2022/dsa-5267
- www.debian.orghttps://www.debian.org/security/2022/dsa-5269
- csrc.nist.govhttps://csrc.nist.gov/projects/hash-functions/sha-3-project
- eprint.iacr.orghttps://eprint.iacr.org/2023/331
- github.comhttps://github.com/XKCP/XKCP/security/advisories/GHSA-6w4m-2xhg-2658
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2022/10/msg00041.html
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2022/11/msg00000.html
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3ALQ6BDDPX5HU5YBQOBMDVAA2TSGDKIJ/
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMIEXLMTW5GO36HTFFWIPB3OHZXCT3G4/
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1291353.7 BAI—
——0picoquic before 2026.11.05.3e2e3d3 contains an integer overflow vulnerability in picoquic_decode_time_stamp_frame() that allows remote QUIC peers to corrupt stored timestamps by sending oversized TIME_STAMP values. Attackers on connections negotiating the TIME_STAMP extension can send large values shifted by ack_delay_exponent to wrap the result, corrupting RTT and bandwidth estimation and degrading congestion control.1dCVE-2026-109094——
——0A integer overflow that can lead to a buffer overrread in the XRes QueryResourceBytes Swap Path in the X.Org xwayland before 24.1.15 and X Server before 21.1.26 on 32bit systems could be used by authenticated clients to crash the X server.2dCVE-2026-1075248.8 ALT—
——0Dell PowerStore contains an integer overflow vulnerability. An authenticated storage host could exploit this vulnerability, potentially leading to out-of-bounds data access or denial of service.2dCVE-2026-1075238.7 ALT—
——0Dell PowerStore contains an integer overflow vulnerability. An adjacent attacker could exploit it to bypass volume bounds checks, potentially leading to data destruction or denial of service.2dCVE-2026-109095——
——0A integer overflow in glamor Xv Image Size handling in X.Org xwayland before 24.1.15 and X server before 21.1.26 could be used by authenticated clients to crash the X server or leak out data.1dCVE-2026-103645—6.7%
——2An integer overflow vulnerability in the Qt QTextCodec fromUnicode() and toUnicode() functionality of the Qt 5 Core Compatibility APIs module (Qt 6) and the Qt Core module (Qt 5). Only builds where Qt is compiled with ICU support are affected.2d