PT-2022-19371 · Openrazer+1 · Openrazer+1

Tallossos · Published 2022-05-20 · Updated 2025-04-24 · CVE-2022-29023

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenRazer versions prior to v3.3.0

Description A buffer overflow issue exists in the razermouse driver, allowing attackers to cause a Denial of Service (DoS) and possibly escalate their privileges via a crafted buffer sent to the matrix custom frame device.

Recommendations For versions prior to v3.3.0, update to version v3.3.0 or later to resolve the issue.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2022-29023

DLA-4136-1

Affected Products

Debian

Openrazer

References · 13

• 🔥 https://cyberark.com/resources/threat-research-blog/colorful-vulnerabilities · Exploit
• https://github.com/openrazer/openrazer/pull/1790 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-29023 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-29023 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-29023 · Security Note
• https://ubuntu.com/security/CVE-2022-29023 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-29023 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4136-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-29023 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-29023 · Vendor Advisory
• https://github.com/openrazer/openrazer/commit/7e8a04feb378a679f1bcdcae079a5100cc45663b · Note
• https://t.me/cybersecuritytechnologies/6816 · Telegram Post
• https://lists.debian.org/debian-lts-announce/2025/04/msg00032.html · Note