CVE-2022-29973: Medium severity exfatprogs vulnerability
Published May 2, 2022
·Updated
relan exFAT 1.3.0 allows local users to obtain sensitive information (data from deleted files in the filesystem) in certain situations involving offsets beyond ValidDataLength.
Affected Software
1 affected component
Exfat Project Exfat=1.3.0
Event History
May 2, 2022
CVE Published
via MITRE·05:09 AM
Data Sourced
via MITRE·05:09 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-29973?
CVE-2022-29973 is classified as a medium severity vulnerability due to its potential to expose sensitive information.
2
How do I fix CVE-2022-29973?
To remediate CVE-2022-29973, users should upgrade to the latest version of the exFAT filesystem that addresses this issue.
3
What is the impact of CVE-2022-29973 on local users?
Local users can potentially access deleted file data due to the vulnerability in the exFAT filesystem.
4
Which version of exFAT is affected by CVE-2022-29973?
The affected version of exFAT is 1.3.0.
5
Is CVE-2022-29973 a remote or local vulnerability?
CVE-2022-29973 is a local vulnerability, as it requires local user access to exploit.