CVE-2022-1350 - CVE House

Back to Database

Status published Medium CVE-2022-1350

GhostPCL gsmchunk.c chunk_free_object memory corruption

4.3 CVSS

Vulnerability Description

A vulnerability classified as problematic was found in GhostPCL 9.55.0. This vulnerability affects the function chunk_free_object of the file gsmchunk.c. The manipulation with a malicious file leads to a memory corruption. The attack can be initiated remotely but requires user interaction. The exploit has been disclosed to the public as a POC and may be used. It is recommended to apply the patches to fix this issue.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-1350

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from unspecified

View All →

tatoeba2 Profile Name cross site scripting

pig-vector LogisticRegression.java LogisticRegression temp file

sslh Packet Dumping probe.c hexdump format string

collective.contact.widget widgets.py title cross site scripting

WP-Ban ban-options.php cross site scripting

Affected Vendor

unspecified

View all reports →

Affected Software

GhostPCL

Vulnerable Versions:

9.55.0

Timeline

Official Publish: April 14th, 2022

Last Modified: April 15th, 2025

Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1203 Exploitation for Client Execution

T1055 Process Injection

Defense Evasion

T1105 Ingress Tool Transfer

Command and Control