UpHeron
All vulnerabilities

Servers and applications

CVE-2022-41742

NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted audio or video file. The…

Severity
High 7.1
Published
19 Oct 2022
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
nginxServers and applications · cpe:a:f5:nginx
  • From 1.1.3 up to 1.22.0
  • From r22 up to r27
  • Version 1.23.0
  • Version 1.23.1
  • Version r1
  • Version r2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-41742
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-41742