Medium severity6.2NVD Advisory· Published Oct 21, 2022· Updated Jun 17, 2026
CVE-2022-23462
CVE-2022-23462
Description
IOWOW is a C utility library and persistent key/value storage engine. Versions 1.4.15 and prior contain a stack buffer overflow vulnerability that allows for Denial of Service (DOS) when it parses scientific notation numbers present in JSON. A patch for this issue is available at commit a79d31e4cff1d5a08f665574b29fd885897a28fd in the master branch of the repository. There are no workarounds other than applying the patch.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <=1.4.15
- Softmotions/iowowv5Range: 1.4.15
Patches
Vulnerability mechanics
References
2- github.com/Softmotions/iowow/commit/a79d31e4cff1d5a08f665574b29fd885897a28fdnvdPatchThird Party Advisory
- securitylab.github.com/advisories/GHSL-2022-066_iowow/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.