alpine · CVE-2022-0496

Quick triage

Priority: medium Published: Updated:

View at Official alpine advisory, NVD, CVE.org · CVE detail

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2022-0496: 1 source package rows (openscad); 15 state rows across 5 repos (3.20-community, 3.21-community, 3.22-community, 3.23-community, edge-community); fixed 15, open 0.

Description:

A vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily malformed!) properties may cause an out-of-bounds memory access when imported using import().

cvelogic Threat Intelligence