CVE-2022-36148 | ByteOS Network

Vulnerability Details :

CVE-2022-36148

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-16 Aug, 2022 | 20:02

Updated At-03 Aug, 2024 | 10:00

fdkaac commit 53fe239 was discovered to contain a floating point exception (FPE) via wav_open at /src/wav_reader.c.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:16 Aug, 2022 | 20:02

Updated At:03 Aug, 2024 | 10:00

▼CVE Numbering Authority (CNA)

fdkaac commit 53fe239 was discovered to contain a floating point exception (FPE) via wav_open at /src/wav_reader.c.

Affected Products

Vendor

Product

Versions

Affected

n/a

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://github.com/nu774/fdkaac/issues/52	x_refsource_MISC

Hyperlink: https://github.com/nu774/fdkaac/issues/52

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://github.com/nu774/fdkaac/issues/52	x_refsource_MISC x_transferred

Hyperlink: https://github.com/nu774/fdkaac/issues/52

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

Source:cve@mitre.org

Published At:16 Aug, 2022 | 21:15

Updated At:18 Aug, 2022 | 14:10

fdkaac commit 53fe239 was discovered to contain a floating point exception (FPE) via wav_open at /src/wav_reader.c.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Type: Primary

Version: 3.1

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CPE Matches

fdkaac_project>>fdkaac>>Versions before 1.0.3(exclusive)

cpe:2.3:a:fdkaac_project:fdkaac:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-697	Primary	nvd@nist.gov

CWE ID: CWE-697

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://github.com/nu774/fdkaac/issues/52	cve@mitre.org	Exploit Issue Tracking Patch Third Party Advisory

Hyperlink: https://github.com/nu774/fdkaac/issues/52

Source: cve@mitre.org

Resource:

Exploit

Issue Tracking

Patch

Third Party Advisory

Similar CVEs

10Records found

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 19.12%

||

7 Day CHG~0.00%

Published-14 Jun, 2023 | 00:00

Updated-03 Jan, 2025 | 15:15

fdkaac before 1.0.5 was discovered to contain a heap buffer overflow in caf_info function in caf_reader.c.

Vendor-fdkaac_project n/a

Product-fdkaac n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 19.57%

||

7 Day CHG~0.00%

Published-14 Jun, 2023 | 00:00

Updated-03 Jan, 2025 | 16:15

fdkaac before 1.0.5 was discovered to contain a stack overflow in read_callback function in src/main.c.

Vendor-fdkaac_project n/a

Product-fdkaac n/a

CWE ID-CWE-787

Out-of-bounds Write

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.05% / 14.40%

||

7 Day CHG~0.00%

Published-12 Dec, 2023 | 00:00

Updated-02 Aug, 2024 | 22:09

Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c.

Vendor-espeak-ng n/a

Product-espeak-ng n/a

CWE ID-CWE-697

Incorrect Comparison

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.07% / 20.73%

||

7 Day CHG~0.00%

Published-16 Aug, 2022 | 20:12

Updated-03 Aug, 2024 | 09:36

jpeg-quantsmooth before commit 8879454 contained a floating point exception (FPE) via /jpeg-quantsmooth/jpegqs+0x4f5d6c.

Vendor-jpeg_quant_smooth_project n/a

Product-jpeg_quant_smooth n/a

CWE ID-CWE-697

Incorrect Comparison

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.15% / 36.16%

||

7 Day CHG~0.00%

Published-23 Sep, 2022 | 17:10

Updated-22 May, 2025 | 20:15

SWFTools commit 772e55a2 was discovered to contain a floating point exception (FPE) via DCTStream::readMCURow() at /xpdf/Stream.cc.ow()

Vendor-n/a SWFTools

Product-swftools n/a

CWE ID-CWE-697

Incorrect Comparison

Matching Score-4

Assigner-Protect AI (formerly huntr.dev)

Matching Score-4

Assigner-Protect AI (formerly huntr.dev)

CVSS Score-6.8||MEDIUM

EPSS-0.13% / 33.70%

||

7 Day CHG~0.00%

Published-05 Dec, 2022 | 00:00

Updated-14 Apr, 2025 | 17:56

Floating Point Comparison with Incorrect Operator in vim/vim

Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804.

Vendor-Vim

Product-vim vim/vim

CWE ID-CWE-1077

Floating Point Comparison with Incorrect Operator

CWE ID-CWE-697

Incorrect Comparison

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.07% / 21.46%

||

7 Day CHG~0.00%

Published-25 May, 2022 | 00:00

Updated-27 Jun, 2025 | 18:51

In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a.

Vendor-n/a SoX - Sound eXchange

Product-sound_exchange n/a

CWE ID-CWE-697

Incorrect Comparison

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 19.82%

||

7 Day CHG~0.00%

Published-16 Aug, 2022 | 20:13

Updated-03 Aug, 2024 | 10:45

XPDF commit ffaf11c was discovered to contain a floating point exception (FPE) via DCTStream::decodeImage() at /xpdf/Stream.cc.

Vendor-xpdf_project n/a

Product-xpdf n/a

CWE ID-CWE-697

Incorrect Comparison

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 19.66%

||

7 Day CHG-0.11%

Published-16 Aug, 2022 | 20:00

Updated-03 Aug, 2024 | 09:29

JPEGDEC commit be4843c was discovered to contain a FPE via DecodeJPEG at /src/jpeg.inl.

Vendor-bitbanksoftware n/a

Product-jpegdec n/a

CWE ID-CWE-697

Incorrect Comparison

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.08% / 23.43%

||

7 Day CHG~0.00%

Published-12 Jan, 2022 | 00:00

Updated-04 Aug, 2024 | 02:44

A Segmentation fault caused by a floating point exception exists in Gpac through 1.0.1 using mp4box via the naludmx_enqueue_or_dispatch function in reframe_nalu.c, which causes a denial of service.

Vendor-n/a GPAC

Product-gpac n/a

CWE ID-CWE-697

Incorrect Comparison