CVE-2022-45474

drachtio-server 0.8.18 has a request-handler.cpp event_cb use-after-free for any request.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-11-18

Last modified

2025-04-29

Weaknesses

CWE-416

Affected products

• Drachtio-server (Drachtio)

References

• https://github.com/drachtio/drachtio-server/commit/860f025468feb31c43227153d8fb3f34210a522e
• https://github.com/drachtio/drachtio-server/issues/240