NetSight
critical9.8

CVE-2022-29503

A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40.

Impact

A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40. Thread allocation can lead to memory corruption. An attacker can create threads to trigger this vulnerability.

Affected products

VendorProductAffected versions
UclibcUclibc
Version 0.9.33.2
Uclibc-Ng ProjectUclibc-Ng
Version 1.0.40
AnkerEufy Homebase 2 Firmware
Version 2.1.8.8h

Weakness classification

References