Security Advisory

CVE-2022-33896

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-10-07 15:05:08

Last updated 2025-04-15 18:49:15

Assigner talos

State PUBLISHED

Description

A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A specially-crafted malformed file can cause memory corruption by using memory before buffer start, which can lead to code execution. A victim would need to access a malicious file to trigger this vulnerability.

← Browse all CVEs View on cve.org ↗