CVE-2022-21147

An out of bounds read vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.7.7. A specially-crafted PE file can trigger this vulnerability to cause denial of service and termination of malware scan. An attacker can provide a malicious file to trigger this vulnerability.

Score

CVSS 3.1 5.5 Medium

Status

Modified - talos-cna@cisco.com

Published

2022-05-12

Last modified

2025-04-15

Weaknesses

CWE-125, CWE-823

Affected products

• Alyac (Estsoft)

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1452
• https://www.estsecurity.com/public/product/alyac