CVE-2022-28330

CVE-2022-28330: read beyond bounds in mod_isapi

Vendor Apache Software Foundation

Product Apache HTTP Server

Weakness CWE-125

Published June 8, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Apache HTTP Server 2.4.53 and earlier on Windows may read beyond bounds when configured to process requests with the mod_isapi module.

Key dates

02Disclosure timeline

June 8, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-28330 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/125.html

Related vulnerabilities

04Related CVE

CVE-2025-20703 CVE-2026-9267 CVE-2021-44183 Adobe Dimension TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2021-28589 Adobe Media Encoder TS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2025-55339 Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability