CVE-2022-2274

The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA implementation with 2048 bit private keys incorrect on such machines and memory corruption will happen during the computation. As a consequence of the memory corruption an attacker may be able to trigger a remote code execution on the machine performing the computation. SSL/TLS servers or other servers using 2048 bit RSA private keys running on machines supporting AVX512IFMA instructions of the X86_64 architecture are affected by this issue.

• CWE-787

• https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=4d8a88c134df634ba610ff8db1eb8478ac5fd345
• https://github.com/openssl/openssl/issues/18625Exploit, Issue Tracking, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220715-0010/Third Party Advisory
• https://www.openssl.org/news/secadv/20220705.txtVendor Advisory
• https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=4d8a88c134df634ba610ff8db1eb8478ac5fd345
• https://github.com/openssl/openssl/issues/18625Exploit, Issue Tracking, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220715-0010/Third Party Advisory
• https://www.openssl.org/news/secadv/20220705.txtVendor Advisory

Published

Jul 1, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22734The Simple Quotation WordPress plugin through 1.3.2 does not…6.1
• CVE-2022-22735The Simple Quotation WordPress plugin through 1.3.2 does not…8.8
• CVE-2022-22736If Firefox was installed to a world-writable directory, a lo…7
• CVE-2022-22737Constructing audio sinks could have lead to a race condition…7.5
• CVE-2022-22738Applying a CSS filter effect could have accessed out of boun…8.8
• CVE-2022-22739Malicious websites could have tricked users into accepting l…6.5
• CVE-2022-22740Certain network request objects were freed too early when re…8.8
• CVE-2022-22741When resizing a popup while requesting fullscreen access, th…7.5
• CVE-2022-22742When inserting text while in edit mode, some characters migh…6.5
• CVE-2022-22743When navigating from inside an iframe while requesting fulls…4.3
• CVE-2022-22744The constructed curl command from the "Copy as curl" feature…8.8
• CVE-2022-22745Securitypolicyviolation events could have leaked cross-origi…6.5