VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Sep 19, 2022· Updated Jun 17, 2026

CVE-2022-29835

CVE-2022-29835

Description

WD Discovery software executable files were signed with an unsafe SHA-1 hashing algorithm. An attacker could use this weakness to create forged certificate signatures due to the use of a hashing algorithm that is not collision-free. This could thereby impact the confidentiality of user content. This issue affects: Western Digital WD Discovery WD Discovery Desktop App versions prior to 4.4.396 on Mac; WD Discovery Desktop App versions prior to 4.4.396 on Windows.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Centennial/Discoveryllm-fuzzy
    Range: <4.4.396
  • Western Digital/WD Discoveryv5
    Range: WD Discovery Desktop App

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.