CVE-2022-23462

IOWOW is a C utility library and persistent key/value storage engine. Versions 1.4.15 and prior contain a stack buffer overflow vulnerability that allows for Denial of Service (DOS) when it parses scientific notation numbers present in JSON. A patch for this issue is available at commit a79d31e4cff1d5a08f665574b29fd885897a28fd in the `master` branch of the repository. There are no workarounds other than applying the patch.

• CWE-120
• CWE-121
• CWE-787

• https://github.com/Softmotions/iowow/commit/a79d31e4cff1d5a08f665574b29fd885897a28fdPatch, Third Party Advisory
• https://securitylab.github.com/advisories/GHSL-2022-066_iowow/Exploit, Third Party Advisory
• https://github.com/Softmotions/iowow/commit/a79d31e4cff1d5a08f665574b29fd885897a28fdPatch, Third Party Advisory
• https://securitylab.github.com/advisories/GHSL-2022-066_iowow/Exploit, Third Party Advisory

Published

Oct 21, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23457ESAPI (The OWASP Enterprise Security API) is a free, open so…9.8
• CVE-2022-23458Toast UI Grid is a component to display and edit data. Versi…6.1
• CVE-2022-23459Jsonxx or Json++ is a JSON parser, writer and reader written…9.8
• CVE-2022-2346In affected versions of Octopus Deploy it is possible for a …4.3
• CVE-2022-23460Jsonxx or Json++ is a JSON parser, writer and reader written…7.5
• CVE-2022-23461Jodit Editor is a WYSIWYG editor written in pure TypeScript …6.1
• CVE-2022-23463Nepxion Discovery is a solution for Spring Cloud. Discover i…9.8
• CVE-2022-23464Nepxion Discovery is a solution for Spring Cloud. Discovery …7.5
• CVE-2022-23465SwiftTerm is a Xterm/VT100 Terminal emulator. Prior to commi…7.8
• CVE-2022-23466teler is an real-time intrusion detection and threat alert d…5.4
• CVE-2022-23467OpenRazer is an open source driver and user-space daemon to …4.6
• CVE-2022-23468xrdp is an open source project which provides a graphical lo…9.8