High severity7.5NVD Advisory· Published Aug 22, 2022· Updated Jun 17, 2026

CVE-2022-38668

Description

HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack memory when fulfilling a request for a static file smaller than 16 KB.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

crow/crow2 versions
cpe:2.3:a:crowcpp:crow:1.0\+4:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:crowcpp:crow:1.0\+4:*:*:*:*:*:*:*
- (no CPE)range: <=1.0+4
Crow/HTTPdescription

Patches

Vulnerability mechanics

References

github.com/0xhebi/CVEs/blob/main/Crow/CVE-2022-38668.mdnvdExploitThird Party Advisory
gynvael.coldwind.plnvdExploitThird Party Advisory
github.com/CrowCpp/Crow/pull/523nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000