Out-Of-Bounds Read Vulnerability in Trend Micro Security Products
CVE-2022-37347

5.5MEDIUM

Key Information:

Vendor
Trend Micro
Status
Trend Micro Security (consumer)
Vendor
CVE Published:
19 September 2022

Summary

Trend Micro Security versions 2021 and 2022 are afflicted by an Out-Of-Bounds Read vulnerability, enabling attackers to potentially access sensitive information from unauthorized memory locations, which may culminate in system crashes. This issue highlights the importance of maintaining strict memory management practices to mitigate information disclosure threats.

Affected Version(s)

Trend Micro Security (Consumer) 2022 (17.7.1383 and below)

References

https://helpcenter.trendmicro.com/en-us/article/tmka-11058
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-22-1176/
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.