
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2022-24988 affects the galois_2p8 library before version 0.1.2, where a buffer overflow vulnerability exists in the PrimitivePolynomialField::new function. The vulnerability was discovered and fixed on February 13, 2022 (Changelog).
The vulnerability is caused by an off-by-one error in the PrimitivePolynomialField::new function, where it writes one byte past its allocated vector space. This results in a buffer overflow condition that could potentially lead to memory corruption (Changelog).
The buffer overflow vulnerability could potentially lead to memory corruption and possible program crashes. The exact impact depends on how the library is implemented in applications using it (Changelog).
Users should update to galois_2p8 version 0.1.2 or later, which contains the fix for this buffer overflow vulnerability. The fix prevents the library from writing one byte past its allocated vector (Changelog).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."