CVE-2022-3515 - AskarLabs CVE Database

CVE-2022-3515

Vendor N/A

Product libksba

Weakness CWE-190

Published January 12, 2023

Last update April 8, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.

Key dates

02Disclosure timeline

January 12, 2023 CVE published

April 8, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-3515 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/190.html

Related vulnerabilities

04Related CVE

CVE-2026-40250 OpenEXR has integer overflow in DWA decoder outBufferEnd pointer arithmetic (missed variant of CVE-2026-34589) CVE-2023-24906 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability CVE-2026-23833 ESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component CVE-2022-20684 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability CVE-2022-32545