PT-2022-22643 · Trend Micro · Trend Micro Security

Izobashi + 1 · Published 2022-07-11 · Updated 2022-09-19 · CVE-2022-35234

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Trend Micro Security versions 2021 through 2022

Description The issue allows an attacker to read sensitive information from other memory locations and cause a crash on an affected machine. This is due to an Out-Of-Bounds Read Information Disclosure.

Recommendations For Trend Micro Security versions 2021 through 2022, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2022-35234

ZDI-22-962

Affected Products

Trend Micro Security

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2022-35234 · Security Note
• https://helpcenter.trendmicro.com/en-us/article/tmka-11058 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-35234 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-22-962 · Security Note
• https://t.me/cvenotify/34305 · Telegram Post
• https://t.me/cibsecurity/47302 · Telegram Post
• https://t.me/cvenotify/36463 · Telegram Post
• https://t.me/cibsecurity/50081 · Telegram Post