vulnerability

VMware Photon OS: CVE-2022-24963

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
10	(AV:N/AC:L/Au:N/C:C/I:C/A:C)	Jan 31, 2023	Jan 20, 2025	Sep 2, 2025

Severity

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Published

Jan 31, 2023

Added

Jan 20, 2025

Modified

Sep 2, 2025

Description

Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer.
This issue affects Apache Portable Runtime (APR) version 1.7.0.

Solution

vmware-photon_os_update_tdnf

References

CVE-2022-24963
https://attackerkb.com/topics/CVE-2022-24963
CWE-190

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today