CVE-2022-25147

Apache Portable Runtime Utility (APR-util): out-of-bounds writes in the apr_base64 family of functions

State: Published
Severity: Not scored
Published: Jan 31, 2023
Updated: Feb 13, 2025
Reserved: Feb 14, 2022

Description

Integer Overflow or Wraparound vulnerability in apr_base64 functions of Apache Portable Runtime Utility (APR-util) allows an attacker to write beyond bounds of a buffer.

This issue affects Apache Portable Runtime Utility (APR-util) 1.6.1 and prior versions.

Scores

The record has no CVSS score.

Weaknesses

CWE-190 Integer Overflow or Wraparound

Affected Products

Product	Versions
Apache Portable Runtime Utility (APR-util)Apache Software Foundation	1.6.1 and earlierAffected

References

https://lists.apache.org/thread/np5gjqlohc4f62lr09vrn61vl44cylh8vendor-advisory
https://security.netapp.com/advisory/ntap-20240315-0001/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.