PatchTheCVECVE-2022-27648: This vulnerability allows remote attackers to execute arbitrary code on affected installations of KOYO Screen
CVE-2022-27648 is a high-severity flaw (CVSS 7.8) affecting screen creator advance 2. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of KOYO Screen Creator 0.1.1.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SCA2 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.8 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.9% (top 41%) |
| CISA exploited list | No |
| Weakness | CWE-121 |
| Published | 2023-03-29 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2022-27648?
screen creator advance 2: upgrade to 0.1.1.4. Exact commands for each OS are on this page.
Is CVE-2022-27648 being exploited?
CVE-2022-27648 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2022-27648 affect?
CVE-2022-27648 affects screen creator advance 2. Severity is high (CVSS 7.8). This vulnerability allows remote attackers to execute arbitrary code on affected installations of KOYO Screen Creator 0.1.1.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open
How urgent is CVE-2022-27648?
Priority 42/100. High severity
Related CVEs
- CVE-2023-25755 HIGH 7.8 UPGRADE Screen Creator Advance 2 Ver.0.1.1.4 Build01A and earlier is vulnerable to improper restriction of operations
- CVE-2023-22360 HIGH 7.8 UPGRADE Use-after free vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier due to lack of
- CVE-2023-22353 HIGH 7.8 UPGRADE Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the
- CVE-2023-22350 HIGH 7.8 UPGRADE Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the
- CVE-2023-22349 HIGH 7.8 UPGRADE Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the