CVE-2022-27819

SWHKD 1.1.5 allows unsafe parsing via the -c option. An information leak might occur but there is a simple denial of service (memory exhaustion) upon an attempt to parse a large or infinite file (such as a block or character device).

• CWE-770

• http://www.openwall.com/lists/oss-security/2022/04/14/1Patch, Third Party Advisory
• https://github.com/waycrate/swhkd/commit/b4e6dc76f4845ab03104187a42ac6d1bbc1e0021Patch, Third Party Advisory
• https://github.com/waycrate/swhkd/releasesRelease Notes
• http://www.openwall.com/lists/oss-security/2022/04/14/1Patch, Third Party Advisory
• https://github.com/waycrate/swhkd/commit/b4e6dc76f4845ab03104187a42ac6d1bbc1e0021Patch, Third Party Advisory
• https://github.com/waycrate/swhkd/releasesRelease Notes

Published

Apr 7, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27813Motorola MTM5000 series firmwares lack properly configured m…8.2
• CVE-2022-27814SWHKD 1.1.5 allows arbitrary file-existence tests via the -c…3.3
• CVE-2022-27815SWHKD 1.1.5 unsafely uses the /tmp/swhkd.pid pathname. There…7.8
• CVE-2022-27816SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There…7.1
• CVE-2022-27817SWHKD 1.1.5 consumes the keyboard events of unintended users…4.4
• CVE-2022-27818SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname. Ther…9.1
• CVE-2022-2782In affected versions of Octopus Server it is possible for a …9.1
• CVE-2022-27820OWASP Zed Attack Proxy (ZAP) through w2022-03-21 does not ve…4
• CVE-2022-27821Improper boundary check in Quram Agif library prior to SMR A…5.5
• CVE-2022-27822Information exposure vulnerability in ril property setting p…5.5
• CVE-2022-27823Improper size check in sapefd_parse_meta_HEADER_old function…7.1
• CVE-2022-27824Improper size check of in sapefd_parse_meta_DESCRIPTION func…7.1