CVE-2022-47630

Trusted Firmware-A through 2.8 has an out-of-bounds read in the X.509 parser for parsing boot certificates. This affects downstream use of get_ext and auth_nvctr. Attackers might be able to trigger dangerous read side effects or obtain sensitive information about microarchitectural state.

• CWE-125
• CWE-125

• http://www.openwall.com/lists/oss-security/2023/01/16/8Mailing List, Patch, Third Party Advisory
• https://trustedfirmware-a.readthedocs.io/en/latest/security_advisories/security-advisory-tfv-10.htmlPatch, Vendor Advisory
• https://www.trustedfirmware.org/news/Vendor Advisory
• http://www.openwall.com/lists/oss-security/2023/01/16/8Mailing List, Patch, Third Party Advisory
• https://trustedfirmware-a.readthedocs.io/en/latest/security_advisories/security-advisory-tfv-10.htmlPatch, Vendor Advisory
• https://www.trustedfirmware.org/news/Vendor Advisory

Published

Jan 16, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-47616Hitron CODA-5310 has insufficient filtering for specific par…7.2
• CVE-2022-47617Hitron CODA-5310 has hard-coded encryption/decryption keys i…7.2
• CVE-2022-47618Merit LILIN AH55B04 & AH55B08 DVR firm has hard-coded admini…9.8
• CVE-2022-4762The Materialis Companion WordPress plugin before 1.3.40 does…5.4
• CVE-2022-47629Libksba before 1.6.3 is prone to an integer overflow vulnera…9.8
• CVE-2022-4763The Icon Widget WordPress plugin before 1.3.0 does not valid…5.4
• CVE-2022-47631Razer Synapse through 3.7.1209.121307 allows privilege escal…7.8
• CVE-2022-47632Razer Synapse before 3.7.0830.081906 allows privilege escala…6.8
• CVE-2022-47633An image signature validation bypass vulnerability in Kyvern…8.1
• CVE-2022-47634M-Link Archive Server in Isode M-Link R16.2v1 through R17.0 …8.1
• CVE-2022-47635Wildix WMS 6 before 6.02.20221216, WMS 5 before 5.04.2022121…9.8
• CVE-2022-47636A DLL hijacking vulnerability has been discovered in OutSyst…7.8