CVE-2022-48570

Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocatorWithCleanup could write to memory outside of the allocation if the allocated memory was not 16-byte aligned. NOTE: this issue exists because the CVE-2019-14318 fix was intentionally removed for functionality reasons.

• CWE-787

• https://github.com/weidai11/cryptopp/issues/992Exploit, Issue Tracking, Patch, Vendor Advisory
• https://github.com/weidai11/cryptopp/releases/tag/CRYPTOPP_8_4_0Release Notes
• https://github.com/weidai11/cryptopp/issues/992Exploit, Issue Tracking, Patch, Vendor Advisory
• https://github.com/weidai11/cryptopp/releases/tag/CRYPTOPP_8_4_0Release Notes

Published

Aug 22, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-4856A vulnerability has been found in Modbus Tools Modbus Slave …7.8
• CVE-2022-48560A use-after-free exists in Python through 3.9 via heappushpo…7.5
• CVE-2022-48564read_ints in plistlib.py in Python through 3.9.1 is vulnerab…6.5
• CVE-2022-48565An XML External Entity (XXE) issue was discovered in Python …9.8
• CVE-2022-48566An issue was discovered in compare_digest in Lib/hmac.py in …5.9
• CVE-2022-4857A vulnerability was found in Modbus Tools Modbus Poll up to …7.8
• CVE-2022-48571memcached 1.6.7 allows a Denial of Service via multi-packet …7.5
• CVE-2022-48575A person with access to a Mac may be able to bypass Login Wi…3.5
• CVE-2022-48577An access issue was addressed with improved access restricti…5.5
• CVE-2022-48578An out-of-bounds read was addressed with improved bounds che…7.1
• CVE-2022-48579UnRAR before 6.2.3 allows extraction of files outside of the…7.5
• CVE-2022-4858Insertion of Sensitive Information into Log Files in M-Files…7.5