CVE-2022-29973

4.7 mediumEPSS 0.3%

Medium (4.7) in exfat project exfat. EPSS 0.3% chance of exploitation in the next 30 days.

relan exFAT 1.3.0 allows local users to obtain sensitive information (data from deleted files in the filesystem) in certain situations involving offsets beyond ValidDataLength.

Severity

CVSS 3.1

4.7 medium

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-31)
CWE: CWE-770
Published: 2022-05-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

exfat_project:exfat

References

https://github.com/relan/exfat/issues/185
https://github.com/relan/exfat/issues/185

Check your stack JSON