CVE-2022-2979 HIGH

CVE-2022-2979: Omron CX-Programmer

Vendor Omron

Product CX-Programmer

Weakness CWE-416

Published September 12, 2022

Last update April 16, 2025

View on NVD All CVEs

CVSS base score

7.8/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary code execution.

Key dates

02Disclosure timeline

September 12, 2022 CVE published

April 16, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-2979 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/416.html

Related vulnerabilities

04Related CVE

CVE-2025-9394 PoDoFo PDF Dictionary PdfTokenizer.cpp DetermineDataType use after free CVE-2025-59946 NanoMQ has a Use After Free vulnerability via sub info list CVE-2026-9958 CVE-2026-10635 Dangling memory-domain pointer (use-after-free) in Xtensa MMU page-table code on memory-domain de-init CVE-2024-11545 IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability