CVE-2022-43508: Use After Free
Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-43508?
CVE-2022-43508 is a use-after free vulnerability in CX-Programmer v.9.77 and earlier that may lead to information disclosure and/or arbitrary code execution.
What is the severity of CVE-2022-43508?
The severity of CVE-2022-43508 is high with a CVSS score of 7.8.
How can the use-after free vulnerability in CX-Programmer v.9.77 and earlier be exploited?
The use-after free vulnerability in CX-Programmer v.9.77 and earlier can be exploited by having a user open a specially crafted CXP file.
Is there a fix for CVE-2022-43508?
It is recommended to update to a version of CX-Programmer that is newer than v.9.77 to mitigate the use-after free vulnerability.
Where can I find more information about CVE-2022-43508?
You can find more information about CVE-2022-43508 on the JVN and JVN-C websites.