← Database

CVE-2022-28331

CRITICAL CVSS: 9.8 Published: 2023-01-31 Modified: 2026-06-17

Description

On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in apr_socket_sendv(). This is a result of integer overflow.

Affected Platforms

Microsoft WindowsApache Portable Runtime

Weakness Type

CWE-190, CWE-190

References