Skip to content
OpenAdvisories
Medium · 5.3 CVE-2022-27819 EUVD-2022-1755GHSA-h6xw-mghq-7523

Unsafe parsing in SWHKD

Published Apr 7, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

SWHKD 1.1.5 allows unsafe parsing via the -c option. An information leak might occur but there is a simple denial of service (memory exhaustion) upon an attempt to parse a large or infinite file (such as a block or character device).

Affected packages

EcosystemPackageAffectedFixedRecord
crates.io Simple-Wayland-HotKey-Daemon < 1.2.0 1.2.0 GHSA-h6xw-mghq-7523

References