CVE-2022-30193
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Jun 15, 2022
Updated: Jan 2, 2025
Summary
CVE-2022-30193 is a critical remote code execution vulnerability affecting AV1 video extension. An attacker can exploit this weakness by crafting a maliciously crafted AV1 video file, which, when decoded, allows the execution of arbitrary code on the victim's system. Successful exploitation could lead to a complete system compromise, posing a significant risk to organizations and individuals using AV1 video decoders. It is essential to apply the available patches or updates to mitigate this vulnerability promptly.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Microsoft