CVE-2022-50922
Published: 13 January 2026
Summary
CVE-2022-50922 is a high-severity Classic Buffer Overflow (CWE-120) vulnerability in Litexmedia (inferred from references). Its CVSS base score is 8.6 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 48.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-16 (Memory Protection).
Deeper analysis
CVE-2022-50922 is a buffer overflow vulnerability (CWE-120) affecting Audio Conversion Wizard version 2.01. The issue arises when the application processes a specially crafted registration code, which overwrites the memory stack and allows attackers to execute arbitrary code. This flaw potentially enables remote code execution through a carefully constructed input buffer.
Remote attackers can exploit this vulnerability over the network with low attack complexity, requiring no privileges or user interaction, as reflected in its CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Successful exploitation grants high-impact access to confidentiality, integrity, and availability, allowing full compromise of the affected system.
Advisories from VulnCheck and an Exploit-DB entry (exploit 50811) document the buffer overflow details, while the vendor site at litexmedia.com/audio-wizard/ provides information on the software. No patches or specific mitigations are detailed in the referenced sources.
A public proof-of-concept exploit is available on Exploit-DB, highlighting the risk of real-world exploitation.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-2633
Vulnerability details
Audio Conversion Wizard v2.01 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting memory with a specially crafted registration code. Attackers can generate a payload that overwrites the application's memory stack, potentially enabling remote code…
more
execution through a carefully constructed input buffer.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The vulnerability enables remote code execution via a buffer overflow in a network-accessible application without authentication or user interaction, directly mapping to exploitation of a public-facing application.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Implements memory safeguards such as stack canaries, DEP, and ASLR to directly prevent arbitrary code execution from stack buffer overflows in the registration code processing.
Requires validation of the specially crafted registration code input to block buffer overflows before memory corruption occurs.
Mandates identification, reporting, and correction of the buffer overflow flaw through timely patching or replacement of Audio Conversion Wizard v2.01.