CVE-2022-24988

CRITICAL 9.8CVE-2022-24988 · Published 14/02/2022 · updated 17/06/2026

In short

CVE-2022-24988 is a CRITICAL (CVSS 9.8) vulnerability affecting galois 2p8 (galois 2p8 project).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.0% of all vulnerabilities.
Fix: update to 0.1.2 or later.

Package	Affected versions	Patched versions
galois 2p8 galois_2p8_project	`< 0.1.2`	`0.1.2`

In galois_2p8 before 0.1.2, PrimitivePolynomialField::new has an off-by-one buffer overflow for a vector.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.