Critical severity9.8NVD Advisory· Published Apr 14, 2022· Updated Jun 17, 2026

CVE-2022-28711

Description

A memory corruption vulnerability exists in the cgi.c unescape functionality of ArduPilot APWeb master branch 50b6b7ac - master branch 46177cb9. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

ArduPilot/APWebv5
Range: master commit 50b6b7ac - master commit 46177cb9
ArduPilot/Apweb
cpe:2.3:a:ardupilot:apweb:-:*:*:*:*:*:*:*
ArduPilot/Ardupilotllm-fuzzy
Range: 50b6b7ac - 46177cb9

Patches

Vulnerability mechanics

References

talosintelligence.com/vulnerability_reports/TALOS-2022-1512nvdExploitThird Party Advisory
www.talosintelligence.com/vulnerability_reports/TALOS-2022-1512nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000