CVE-2022-4741

A vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory allocation. The attack may be initiated remotely. Upgrading to version 1.2.1 is able to address this issue. The name of the patch is 42bcff666855ab978e67a9041d0cdea552f20301. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216779.

• CWE-789

• https://github.com/sajari/docconv/commit/42bcff666855ab978e67a9041d0cdea552f20301Patch, Third Party Advisory
• https://github.com/sajari/docconv/pull/111Patch, Third Party Advisory
• https://github.com/sajari/docconv/releases/tag/v1.2.1Release Notes, Third Party Advisory
• https://vuldb.com/?ctiid.216779Third Party Advisory
• https://vuldb.com/?id.216779Third Party Advisory
• https://github.com/sajari/docconv/commit/42bcff666855ab978e67a9041d0cdea552f20301Patch, Third Party Advisory
• https://github.com/sajari/docconv/pull/111Patch, Third Party Advisory
• https://github.com/sajari/docconv/releases/tag/v1.2.1Release Notes, Third Party Advisory
• https://vuldb.com/?ctiid.216779Third Party Advisory
• https://vuldb.com/?id.216779Third Party Advisory

Published

Dec 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-47404Rejected reason: Not used
• CVE-2022-47405Rejected reason: Not used
• CVE-2022-47406An issue was discovered in the fe_change_pwd (aka Change pas…9.8
• CVE-2022-47407An issue was discovered in the fp_masterquiz (aka Master-Qui…6.5
• CVE-2022-47408An issue was discovered in the fp_newsletter (aka Newsletter…9.1
• CVE-2022-47409An issue was discovered in the fp_newsletter (aka Newsletter…7.5
• CVE-2022-47410An issue was discovered in the fp_newsletter (aka Newsletter…7.5
• CVE-2022-47411An issue was discovered in the fp_newsletter (aka Newsletter…7.5
• CVE-2022-47412Given a malicious document provided by an attacker, the ONLY…5.4
• CVE-2022-47413 Given a malicious document provided by an attacker, the Ope…5.4
• CVE-2022-47414 If an attacker has access to the console for OpenKM (and is…5.4
• CVE-2022-47415LogicalDOC Enterprise and Community Edition (CE) are vulnera…5.4