CVE-2022-37348 - Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerability that could allow an attacker to read sensitive information from other memory locations and cause a crash on an affected machine

Back Back to CVE browser

MEDIUM

Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerability that could allow an attacker to read sensitive information from other memory locations and cause a crash on an affected machine

Published Sep 19, 2022

5.5

MEDIUM

CVSS 3.1

EPSS 0.26%

Description

Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerability that could allow an attacker to read sensitive information from other memory locations and cause a crash on an affected machine. This vulnerability is similar to, but not the same as CVE-2022-37347.

Affected products

Vendor Trend Micro Product Trend Micro Security (Consumer) Default
n/a
- Version
  2022 (17.7.1383 and below)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Trend Micro

Trend Micro Security (Consumer)

n/a

Version	Status	Constraints
2022 (17.7.1383 and below)	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (2)

https://helpcenter.trendmicro.com/en-us/article/tmka-11058
x_refsource_MISCPatchVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-1177/
x_refsource_MISCThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://helpcenter.trendmicro.com/en-us/article/tmka-11058		x_refsource_MISCPatchVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-1177/		x_refsource_MISCThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner trendmicro

Published Sep 19, 2022

Updated Aug 3, 2024

Reserved Aug 2, 2022

Link CVE-2022-37348

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-37348

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-37348