CVE-2022-35018
advancecomp: SEGV via invalid read memory access
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 29, 2022
Updated · November 22, 2025
Description
A segmentation fault was found in advancecomp in the col_equal() function of the mngex.cc file. The flaw occurs due to invalid READ memory access. This flaw allows an attacker to cause a crash by tricking a user into opening a malformed file, leading to a denial of service attack.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer