Every CVE Search/ Get API key

CVE-2022-23467

Out of Bounds Read in OpenRazer Driver

4.4 MediumFix available

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the razer_attr_read_dpi_stages, potentially bypassing KASLR. To exploit this vulnerability an attacker would need to access to a users keyboard or mouse or would need to convince a user to use a modified device. The issue has been patched in v3.5.1. Users are advised to upgrade and should be reminded not to plug in unknown USB devices.

Attack profile

How easy it is to exploit

Attack vector
Physical
Complexity
High
Privileges needed
Low
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

0.37%Down 0.5 points since Dec 6, 2022
90%50%10%1%

What each source reports

CVE List Score used 4.4

Out of Bounds Read in OpenRazer Driver

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the razer_attr_read_dpi_stages, potentially bypassing KASLR. To exploit this vulnerability an attacker would need to access to a users keyboard or mouse or would need to convince a user to use a modified device. The issue has been patched in v3.5.1. Users are advised to upgrade and should be reminded not to plug in unknown USB devices.

Record
CVE-2022-23467
CVSS 3.1
4.4 MediumCVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
Weakness
CWE-125
Updated
2026-11-02
EUVDEUVD-2022-28533 4.4

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the razer_attr_read_dpi_stages, potentially bypassing KASLR. To exploit this vulnerability an attacker would need to access to a users keyboard or mouse or would need to convince a user to use a modified device. The issue has been patched in v3.5.1. Users are advised to upgrade and should be reminded not to plug in unknown USB devices.

Record
EUVD-2022-28533
CVSS 3.1
4.4 MediumCVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
Updated
2026-11-02
NVD 4.4

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the razer_attr_read_dpi_stages, potentially bypassing KASLR. To exploit this vulnerability an attacker would need to access to a users keyboard or mouse or would need to convince a user to use a modified device. The issue has been patched in v3.5.1. Users are advised to upgrade and should be reminded not to plug in unknown USB devices.

Record
CVE-2022-23467
CVSS 3.1
4.4 MediumCVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
CVSS 3.1
4.6 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-125
Updated
2026-11-02
OSVALPINE-CVE-2022-23467 4.6

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the razer_attr_read_dpi_stages, potentially bypassing KASLR. To exploit this vulnerability an attacker would need to access to a users keyboard or mouse or would need to convince a user to use a modified device. The issue has been patched in v3.5.1. Users are advised to upgrade and should be reminded not to plug in unknown USB devices.

Record
ALPINE-CVE-2022-23467
CVSS 3.1
4.6 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-03
OSV 4.4

Out of Bounds Read in OpenRazer Driver

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the razer_attr_read_dpi_stages, potentially bypassing KASLR. To exploit this vulnerability an attacker would need to access to a users keyboard or mouse or would need to convince a user to use a modified device. The issue has been patched in v3.5.1. Users are advised to upgrade and should be reminded not to plug in unknown USB devices.

Record
CVE-2022-23467
CVSS 3.1
4.4 MediumCVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
Weakness
CWE-125
Updated
2026-11-02
OSVDEBIAN-CVE-2022-23467 4.6

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the razer_attr_read_dpi_stages, potentially bypassing KASLR. To exploit this vulnerability an attacker would need to access to a users keyboard or mouse or would need to convince a user to use a modified device. The issue has been patched in v3.5.1. Users are advised to upgrade and should be reminded not to plug in unknown USB devices.

Record
DEBIAN-CVE-2022-23467
CVSS 3.1
4.6 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-03
OSVUBUNTU-CVE-2022-23467 4.4

OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a modified USB device an attacker can leak stack addresses of the razer_attr_read_dpi_stages, potentially bypassing KASLR. To exploit this vulnerability an attacker would need to access to a users keyboard or mouse or would need to convince a user to use a modified device. The issue has been patched in v3.5.1. Users are advised to upgrade and should be reminded not to plug in unknown USB devices.

Record
UBUNTU-CVE-2022-23467
CVSS 3.1
4.4 MediumCVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
CVSS 3.1
4.6 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openrazer
Alpine:v3.18
 before 3.5.1-r0
3.5.1-r0
openrazer
Alpine:v3.19
 before 3.5.1-r0
3.5.1-r0
openrazer
Alpine:v3.20
 before 3.5.1-r0
3.5.1-r0
openrazer
Alpine:v3.21
 before 3.5.1-r0
3.5.1-r0
openrazer
Alpine:v3.22
 before 3.5.1-r0
3.5.1-r0
openrazer
Alpine:v3.23
 before 3.5.1-r0
3.5.1-r0
openrazer
Alpine:v3.24
 before 3.5.1-r0
3.5.1-r0
openrazer
Debian:12
 before 3.5.1+dfsg-1
3.5.1+dfsg-1
openrazer
Debian:13
 before 3.5.1+dfsg-1
3.5.1+dfsg-1
openrazer
Debian:14
 before 3.5.1+dfsg-1
3.5.1+dfsg-1
Show 7 moreShow less
Affected packages
PackageAffectedFixed
openrazer
Debian:11
 before 2.9.0+dfsg-1+deb11u1, plus listed versions
2.9.0+dfsg-1
2.9.0+dfsg-1+deb11u1
openrazer
Ubuntu:20.04:LTS
 All versions, plus listed versions
2.5.0+dfsg-1ubuntu2
 None known
openrazer
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.9.0+dfsg-1ubuntu13.2.0+dfsg-3
 None known
openrazer
Ubuntu:24.04:LTS
 All versions, plus listed versions
3.4.0+dfsg-1ubuntu13.6.1+dfsg-13.7.0+dfsg-13.7.0+dfsg-1ubuntu0.13.7.0+dfsg-1ubuntu0.23.7.0+dfsg-1ubuntu0.3
 None known
openrazer
Ubuntu:25.10
 All versions, plus listed versions
3.10.0+dfsg-13.10.2+dfsg-13.10.3+dfsg-2
 None known
openrazer
Ubuntu:26.10
 All versions, plus listed versions
3.11.0+dfsg-13.12.1+dfsg-13.12.3+dfsg-13.12.4+dfsg-1
 None known
openrazer
Ubuntu:26.04:LTS
 All versions, plus listed versions
3.10.3+dfsg-23.11.0+dfsg-13.11.0+dfsg-1ubuntu0.1
 None known

History

History
RecordedChangedSources
affected, aliases, referencesOSV
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-23467 is a medium vulnerability (CVSS 4.4) in Openrazer, published December 5, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 30th percentile. Fixed in openrazer 3.5.1-r0.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open