CVE-2022-29536

In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) via a long page title. The issue occurs because the number of bytes for a UTF-8 ellipsis character is not properly considered.

• CWE-787

• https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1106Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/08/msg00006.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLLDMY4JYDZTMZSCPSY23K5YW3SQYUR6/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N7YWVIUGFRA6GOE3QAPSJJ6EL3DJG5NX/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U5K5UPNHVWXDPSMBNSB2645MD2N5CXQS/
• https://www.debian.org/security/2022/dsa-5208Third Party Advisory
• https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1106Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/08/msg00006.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLLDMY4JYDZTMZSCPSY23K5YW3SQYUR6/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N7YWVIUGFRA6GOE3QAPSJJ6EL3DJG5NX/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U5K5UPNHVWXDPSMBNSB2645MD2N5CXQS/
• https://www.debian.org/security/2022/dsa-5208Third Party Advisory

Published

Apr 20, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-29530An issue was discovered in MISP before 2.4.158. There is sto…5.4
• CVE-2022-29531An issue was discovered in MISP before 2.4.158. There is sto…5.4
• CVE-2022-29532An issue was discovered in MISP before 2.4.158. There is XSS…4.8
• CVE-2022-29533An issue was discovered in MISP before 2.4.158. There is XSS…6.1
• CVE-2022-29534An issue was discovered in MISP before 2.4.158. In UsersCont…7.5
• CVE-2022-29535Zoho ManageEngine OPManager through 125588 allows SQL Inject…9.8
• CVE-2022-29537gp_rtp_builder_do_hevc in ietf/rtp_pck_mpeg4.c in GPAC 2.0.0…5.5
• CVE-2022-29538RESI Gemini-Net Web 4.2 is affected by Improper Access Contr…5.3
• CVE-2022-29539resi-calltrace in RESI Gemini-Net 4.2 is affected by OS Comm…9.8
• CVE-2022-29540resi-calltrace in RESI Gemini-Net 4.2 is affected by Multipl…6.1
• CVE-2022-29546HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial…7.5
• CVE-2022-29547The CreateRedirect extension before 2022-04-14 for MediaWiki…7.5