CVE-2022-24988
Rust vulnerability analysis and mitigation

Overview

CVE-2022-24988 affects the galois_2p8 library before version 0.1.2, where a buffer overflow vulnerability exists in the PrimitivePolynomialField::new function. The vulnerability was discovered and fixed on February 13, 2022 (Changelog).

Technical details

The vulnerability is caused by an off-by-one error in the PrimitivePolynomialField::new function, where it writes one byte past its allocated vector space. This results in a buffer overflow condition that could potentially lead to memory corruption (Changelog).

Impact

The buffer overflow vulnerability could potentially lead to memory corruption and possible program crashes. The exact impact depends on how the library is implemented in applications using it (Changelog).

Mitigation and workarounds

Users should update to galois_2p8 version 0.1.2 or later, which contains the fix for this buffer overflow vulnerability. The fix prevents the library from writing one byte past its allocated vector (Changelog).

Additional resources


SourceThis report was generated using AI

Related Rust vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2026-22863CRITICAL9.2
  • RustRust
  • deno
NoYesJan 15, 2026
CVE-2026-23519HIGH8.9
  • RustRust
  • cmov
NoYesJan 15, 2026
RUSTSEC-2026-0003HIGH8.9
  • RustRust
  • cmov
NoYesJan 14, 2026
CVE-2026-22864HIGH8.1
  • RustRust
  • deno
NoYesJan 15, 2026
CVE-2026-22782LOW2.9
  • RustRust
  • rustfs
NoYesJan 16, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management