← All advisories

Critical severity9.1NVD Advisory· Published Dec 19, 2022· Updated Jun 17, 2026

CVE-2022-44940

CVE-2022-44940

Description

Patchelf v0.9 was discovered to contain an out-of-bounds read via the function modifyRPath at src/patchelf.cc.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
patchelfPyPI	< 0.16.1.0	0.16.1.0

Affected products

3

Patchelf Project/Patchelf
cpe:2.3:a:patchelf_project:patchelf:0.9:*:*:*:*:*:*:*
Patchelf/Patchelfdescription
ghsa-coords
pkg:pypi/patchelf
Range: < 0.16.1.0

Patches

Vulnerability mechanics

References

5

github.com/NixOS/patchelf/pull/419nvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-5pcj-3m26-w633ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-44940ghsaADVISORY
github.com/pypa/advisory-database/tree/main/vulns/patchelf/PYSEC-2022-43144.yamlghsaWEB
github.com/pypa/advisory-database/tree/main/vulns/pypatchelf/PYSEC-2022-43151.yamlghsaWEB

News mentions

0

No linked articles in our index yet.