CVE-2022-48506

A flawed pseudorandom number generator in Dominion Voting Systems ImageCast Precinct (ICP and ICP2) and ImageCast Evolution (ICE) scanners allows anyone to determine the order in which ballots were cast from public ballot-level data, allowing deanonymization of voted ballots, in several types of scenarios. This issue was observed for use of the following versions of Democracy Suite: 5.2, 5.4-NM, 5.5, 5.5-A, 5.5-B, 5.5-C, 5.5-D, 5.7-A, 5.10, 5.10A, 5.15. NOTE: the Democracy Suite 5.17 EAC Certificate of Conformance mentions "Improved pseudo random number algorithm," which may be relevant.

• CWE-338
• CWE-338

• https://dvsorder.orgProduct
• https://freedom-to-tinker.com/2023/06/14/security-analysis-of-the-dominion-imagecast-x/Third Party Advisory
• https://www.eac.gov/sites/default/files/voting_system/files/D-Suite%205.17%20Certificate%20and%20Scope%20SIGNED.pdfProduct, US Government Resource
• https://www.eac.gov/voting-equipment/democracy-suite-517Product, US Government Resource
• https://dvsorder.orgProduct
• https://freedom-to-tinker.com/2023/06/14/security-analysis-of-the-dominion-imagecast-x/Third Party Advisory
• https://www.eac.gov/sites/default/files/voting_system/files/D-Suite%205.17%20Certificate%20and%20Scope%20SIGNED.pdfProduct, US Government Resource
• https://www.eac.gov/voting-equipment/democracy-suite-517Product, US Government Resource

Published

Jun 19, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-48500Configuration defects in the secure OS module.Successful exp…7.5
• CVE-2022-48501Configuration defects in the secure OS module.Successful exp…7.5
• CVE-2022-48502An issue was discovered in the Linux kernel before 6.2. The …7.1
• CVE-2022-48503The issue was addressed with improved bounds checks. This is…8.8
• CVE-2022-48504The issue was addressed with improved handling of caches. Th…5.5
• CVE-2022-48505This issue was addressed with improved data protection. This…5.5
• CVE-2022-48507Vulnerability of identity verification being bypassed in the…7.5
• CVE-2022-48508 Inappropriate authorization vulnerability in the system app…7.5
• CVE-2022-48509Race condition vulnerability due to multi-thread access to m…5.9
• CVE-2022-4851Improper Handling of Values in GitHub repository usememos/me…5.3
• CVE-2022-48510Input verification vulnerability in the AMS module. Successf…9.8
• CVE-2022-48511Use After Free (UAF) vulnerability in the audio PCM driver m…9.8