Skip to content
OpenAdvisories
Medium · 5.3 CVE-2022-28711 EUVD-2022-33153GHSA-g969-j9qm-fx8r

A memory corruption vulnerability exists in the cgi.c unescape functionality of ArduPilot APWeb master branch 50b6b7ac - master branch 4617…

Published Apr 14, 2022 · Updated Apr 15, 2025 · Assigned by talos

Description

A memory corruption vulnerability exists in the cgi.c unescape functionality of ArduPilot APWeb master branch 50b6b7ac - master branch 46177cb9. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
ArduPilot APWeb master commit 50b6b7ac - master commit 46177cb9 —

References