CVE-2022-29503
A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40. Thread allocation can lead to memory corruption. An attacker can create threads to trigger this vulnerability.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - talos-cna@cisco.com
- Published
- 2022-09-29
- Last modified
- 2025-04-15
- Weaknesses
- CWE-119, CWE-770
Affected products
- Eufy Homebase 2 (Anker)
- Eufy Homebase 2 Firmware (Anker)
- Uclibc (Uclibc)
- Uclibc-ng (Uclibc-ng)
- Uclibc-ng (Uclibc-ng Project)
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2022-1517
