CVE-2022-48174Critical· 9.8▾ MidnightThere is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0.6 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 31.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
3.1%
3.1% → 3.2%
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.
debian_linux = 11.0busybox <= 1.36.1Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2023-42366Medium· 5.5A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.
CVE-2026-92205Medium· 6.1BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability
CVE-2026-88834Low· 3.7A flaw was found in BusyBox's httpd web server
CVE-2026-88838Medium· 5.5A flaw was found in BusyBox's mount utility
CVE-2026-88833Medium· 6.5A flaw was found in BusyBox's udhcpc DHCP client
CVE-2026-88840Medium· 5.3BusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated ClientHello message.