https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-35219.htmlhttps://patchthecve.com/cve/CVE-2022-35219.htmlWed, 17 Jun 2026 04:51:34 +0000MEDIUM 5.5: The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet key parameter. A LAN attacker with general user privilege can exploit this vulnerability to disrupt service.https://patchthecve.com/cve/CVE-2022-35218.htmlhttps://patchthecve.com/cve/CVE-2022-35218.htmlWed, 17 Jun 2026 04:51:34 +0000MEDIUM 5.5: The NHI card’s web service component has a heap-based buffer overflow vulnerability due to insufficient validation for packet origin parameter length. A LAN attacker with general user privilege can exploit this vulnerability to disrupt service.https://patchthecve.com/cve/CVE-2022-35217.htmlhttps://patchthecve.com/cve/CVE-2022-35217.htmlWed, 17 Jun 2026 04:51:34 +0000HIGH 7.8: The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A local area network attacker with general user privilege can exploit this vulnerability to execute arbitrary code, manipulate system command or disruhttps://patchthecve.com/cve/CVE-2021-45918.htmlhttps://patchthecve.com/cve/CVE-2021-45918.htmlWed, 17 Jun 2026 04:14:15 +0000HIGH 7.5: NHI’s health insurance web service component has insufficient validation for input string length, which can result in heap-based buffer overflow attack. A remote attacker can exploit this vulnerability to flood the memory space reserved for the program, in order to terminate service without authenti