CVE-2022-1304
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5.
Published Apr 14, 2022 · updated Oct 14, 2026 · e2fsprogs project e2fsprogs
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Apr 14, 2022 · NIST NVD
Detected
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
Oct 14, 2026 · NIST NVD
Updated
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
Affected
- cpe e2fsprogs project/e2fsprogs1.46.5
- cpe fedoraproject/fedora35
- cpe redhat/enterprise linux6.0
- cpe redhat/enterprise linux7.0
- cpe redhat/enterprise linux8.0
Sources
- CVE.orgVulnerability recordCVE-2022-1304
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2022-1304
30-day exploitation probability 1.5%
first.org - NIST NVDVulnerability recordCVE-2022-1304
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
nvd.nist.gov