CVE-2022-28874 : faille élevée f-secure atlant (CVSS 7.5)

Multiple Denial-of-Service vulnerabilities was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files cause memory corruption and heap buffer overflow which eventually can crash the scanning engine. The exploit can be triggered remotely by an attacker.

Sévérité

Élevée (CVSS 7.5)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitation active

Non signalée par la CISA

Publication

23 mai 2022

Dernière mise à jour

17 juin 2026

• f-secure atlant
• f-secure elements endpoint protection
• f-secure linux security
• withsecure cloud protection for salesforce
• withsecure elements collaboration protection

• Fiche CVE-2022-28874 sur le NVD (NIST)
• f-secure.com/en/home/support/security-advisories
• withsecure.com/en/support/security-advisories