CVE-2022-25315
Published: 18 February 2022
Summary
CVE-2022-25315 is a critical-severity Integer Overflow or Wraparound (CWE-190) vulnerability in Debian Debian Linux. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 7.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
CVE-2022-25315 is an integer overflow vulnerability (CWE-190) in the storeRawNames function of Expat (libexpat) versions prior to 2.4.5. The flaw resides in XML parsing code and carries a CVSS 3.1 score of 9.8, reflecting network-accessible exploitation without authentication or user interaction.
An unauthenticated remote attacker can supply a crafted XML document that triggers the overflow during name storage, leading to memory corruption and potential arbitrary code execution, information disclosure, or denial of service on the affected system.
Public advisories and vendor patches recommend immediate upgrade to libexpat 2.4.5 or later; coordinated updates appear in distributions such as Debian LTS, Fedora, and Siemens product firmware, along with the upstream pull request that addresses the integer handling error.
EPSS remains flat at 0.09 with no material post-disclosure rise, and no confirmed in-the-wild exploitation has been reported in the available references.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-29998
Vulnerability details
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.