{"id":"CVE-2022-1215","aliases":["ALPINE-CVE-2022-1215","ALSA-2022:5257","AZL-9861","CLSA-2026-1776957467","DEBIAN-CVE-2022-1215","EUVD-2022-24554","GHSA-q3fm-hh84-2m38","MGASA-2022-0150","OESA-2022-1709","RHSA-2022:5257","RHSA-2022:5331","RLSA-2022:5257","RLSA-2022:5331","SUSE-SU-2022:1305-1","UBUNTU-CVE-2022-1215","USN-5382-1","USN-5382-2","openSUSE-SU-2024:12023-1"],"status":"published","title":"A format string vulnerability was found in libinput","description":"A format string vulnerability was found in libinput","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0038,"percentile":0.32327,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-134"],"published":"2022-04-20T21:36:48Z","modified":"2026-11-03T07:31:05Z","fixes":[{"ecosystem":"Alpine:v3.15","package":"libinput","fixed_in":["1.19.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libinput","fixed_in":["1.20.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libinput","fixed_in":["1.20.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libinput","fixed_in":["1.20.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libinput","fixed_in":["1.20.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libinput","fixed_in":["1.20.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libinput","fixed_in":["1.20.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libinput","fixed_in":["1.20.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libinput","fixed_in":["1.20.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libinput","fixed_in":["1.20.1-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libinput","fixed_in":["1.19.3-2.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libinput-devel","fixed_in":["1.19.3-2.el9_0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libinput-utils","fixed_in":["1.19.3-2.el9_0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libinput","fixed_in":["1.21.0-1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libinput","fixed_in":["1.10.7-2.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libinput-devel","fixed_in":["1.10.7-2.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libinput","fixed_in":["1.20.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libinput","fixed_in":["1.20.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libinput","fixed_in":["1.20.1-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"libinput","fixed_in":["1.16.4-1.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"libinput","fixed_in":["1.15.6-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"libinput","fixed_in":["1.15.6-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"libinput","fixed_in":["1.19.2-2.oe2203"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libinput","fixed_in":["0:1.19.3-2.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libinput-debuginfo","fixed_in":["0:1.19.3-2.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libinput-debugsource","fixed_in":["0:1.19.3-2.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libinput-test-debuginfo","fixed_in":["0:1.19.3-2.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libinput-utils","fixed_in":["0:1.19.3-2.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libinput-utils-debuginfo","fixed_in":["0:1.19.3-2.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libinput-debuginfo","fixed_in":["0:1.19.3-2.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libinput-debugsource","fixed_in":["0:1.19.3-2.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libinput-devel","fixed_in":["0:1.19.3-2.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libinput-test-debuginfo","fixed_in":["0:1.19.3-2.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libinput-utils-debuginfo","fixed_in":["0:1.19.3-2.el9_0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libinput","fixed_in":["0:1.16.3-3.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libinput-debuginfo","fixed_in":["0:1.16.3-3.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libinput-debugsource","fixed_in":["0:1.16.3-3.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libinput-test-debuginfo","fixed_in":["0:1.16.3-3.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libinput-utils","fixed_in":["0:1.16.3-3.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libinput-utils-debuginfo","fixed_in":["0:1.16.3-3.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libinput-debuginfo","fixed_in":["0:1.16.3-3.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libinput-debugsource","fixed_in":["0:1.16.3-3.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libinput-devel","fixed_in":["0:1.16.3-3.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libinput-test-debuginfo","fixed_in":["0:1.16.3-3.el8_6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libinput-utils-debuginfo","fixed_in":["0:1.16.3-3.el8_6"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"libinput","fixed_in":["0:1.19.3-2.el9_0"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libinput","fixed_in":["0:1.16.3-3.el8_6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"libinput","fixed_in":["1.10.5-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libinput","fixed_in":["1.10.5-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libinput","fixed_in":["1.10.5-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libinput","fixed_in":["1.10.5-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libinput","fixed_in":["1.10.5-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"libinput","fixed_in":["1.10.5-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libinput","fixed_in":["1.10.5-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"libinput","fixed_in":["1.10.5-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libinput","fixed_in":["1.10.5-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libinput","fixed_in":["1.10.5-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libinput","fixed_in":["1.10.5-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"libinput","fixed_in":["1.10.5-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libinput","fixed_in":["1.10.5-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libinput","fixed_in":["1.10.5-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libinput","fixed_in":["1.10.5-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libinput","fixed_in":["1.10.5-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"libinput","fixed_in":["1.10.5-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"libinput","fixed_in":["1.10.5-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"libinput","fixed_in":["1.10.5-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"libinput","fixed_in":["1.10.5-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"libinput","fixed_in":["1.10.5-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"libinput","fixed_in":["1.10.5-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libinput","fixed_in":["1.10.4-1ubuntu0.18.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libinput","fixed_in":["1.15.5-1ubuntu0.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libinput","fixed_in":["1.20.0-1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.15","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.0"},{"fixed":"1.19.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.0"},{"fixed":"1.20.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.0"},{"fixed":"1.20.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.0"},{"fixed":"1.20.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.0"},{"fixed":"1.20.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.0"},{"fixed":"1.20.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.0"},{"fixed":"1.20.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.0"},{"fixed":"1.20.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.0"},{"fixed":"1.20.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.0"},{"fixed":"1.20.1-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-2.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libinput-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-2.el9_0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libinput-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-2.el9_0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.0-1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.7-2.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libinput-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.7-2.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.1-1"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.4-1.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.6-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.6-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.2-2.oe2203"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.3-2.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libinput-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.3-2.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libinput-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.3-2.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libinput-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.3-2.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libinput-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.3-2.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libinput-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.3-2.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libinput-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.3-2.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libinput-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.3-2.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libinput-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.3-2.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libinput-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.3-2.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libinput-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.3-2.el9_0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-3.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libinput-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-3.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libinput-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-3.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libinput-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-3.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libinput-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-3.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libinput-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-3.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libinput-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-3.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libinput-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-3.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libinput-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-3.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libinput-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-3.el8_6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libinput-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-3.el8_6"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.3-2.el9_0"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-3.el8_6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-1ubuntu0.18.04.3"}]}],"versions":["1.8.2-1ubuntu2","1.9.2-1","1.9.3-1","1.9.4-1","1.9.4-2","1.9.4-2ubuntu1","1.10.0-1","1.10.1-1","1.10.3-2","1.10.4-1","1.10.4-1ubuntu0.18.04.1","1.10.4-1ubuntu0.18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.5-1ubuntu0.3"}]}],"versions":["1.14.1-2","1.14.2-1","1.14.3-1","1.14.3-1build1","1.15.1-1","1.15.2-1","1.15.3-1","1.15.4-1","1.15.5-1","1.15.5-1ubuntu0.1","1.15.5-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.0-1ubuntu0.1"}]}],"versions":["1.18.1-1","1.19.2-1","1.19.3-1","1.19.3-2","1.20.0-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-1ubuntu0.18.04.3"}]}],"versions":["1.8.2-1ubuntu2","1.9.2-1","1.9.3-1","1.9.4-1","1.9.4-2","1.9.4-2ubuntu1","1.10.0-1","1.10.1-1","1.10.3-2","1.10.4-1","1.10.4-1ubuntu0.18.04.1","1.10.4-1ubuntu0.18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.5-1ubuntu0.3"}]}],"versions":["1.14.1-2","1.14.2-1","1.14.3-1","1.14.3-1build1","1.15.1-1","1.15.2-1","1.15.3-1","1.15.4-1","1.15.5-1","1.15.5-1ubuntu0.1","1.15.5-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libinput","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.0-1ubuntu0.1"}]}],"versions":["1.18.1-1","1.19.2-1","1.19.3-1","1.19.3-2","1.20.0-1"]}],"products":[{"vendor":"freedesktop","product":"libinput"},{"vendor":"microsoft","product":"libinput"}],"references":[{"url":"https://seclists.org/oss-sec/2022/q2/47","tags":["x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://security.gentoo.org/glsa/202310-14","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1215","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-q3fm-hh84-2m38"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-1215","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:5257","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1215","tags":["report"]},{"url":"https://bugzilla.redhat.com/2074952","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-5257.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1776957467.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1215.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-1215","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0150.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30308","tags":["report"]},{"url":"https://lists.x.org/archives/xorg-announce/2022-April/003159.html","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-5382-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1709","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074952","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5257.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1215","tags":["advisory","report"]},{"url":"https://gitlab.freedesktop.org/libinput/libinput/-/commit/04f22107e1a2ead05401d9169fa4306e8c7eefad","tags":["article"]},{"url":"https://gitlab.freedesktop.org/libinput/libinput/-/commit/2a8b8fde90d63d48ce09ddae44142674bbca1c28","tags":["article"]},{"url":"https://gitlab.freedesktop.org/libinput/libinput/-/commit/562157f2a56537f353ca49b194efeb770004ba63","tags":["article"]},{"url":"https://gitlab.freedesktop.org/libinput/libinput/-/commit/a423d7d3269dc32a87384f79e29bb5ac021c83d1","tags":["article"]},{"url":"https://gitlab.freedesktop.org/libinput/libinput/-/issues/752","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2022/04/20/2","tags":["article","report"]},{"url":"https://access.redhat.com/errata/RHSA-2022:5331","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5331.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:5257","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:5331","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221305-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1198111","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1215","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-1215","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5382-2","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-1215","description":"A format string vulnerability was found in libinput","status":"published","published":"2022-05-31T00:00:00Z","modified":"2024-08-02T23:55:24.456Z","cwes":["CWE-134"],"updated_at":"2026-11-02T14:34:38.922686Z"}],"euvd":[{"id":"EUVD-2022-24554","description":"A format string vulnerability was found in libinput","status":"published","published":"2022-05-31T00:00:00Z","modified":"2024-08-02T23:55:24Z","updated_at":"2026-11-03T03:26:01.998866Z"}],"ghsa":[{"id":"GHSA-q3fm-hh84-2m38","title":"A format string vulnerability was found in libinput","description":"A format string vulnerability was found in libinput","status":"published","published":"2022-06-03T00:01:00Z","modified":"2023-10-26T09:30:29Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-134"],"updated_at":"2026-11-02T14:54:48.16134Z"}],"nvd":[{"id":"CVE-2022-1215","description":"A format string vulnerability was found in libinput","status":"published","published":"2022-06-02T14:15:32.187Z","modified":"2026-06-17T04:22:01.657Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-134"],"updated_at":"2026-11-02T14:07:21.261605Z"}],"osv":[{"id":"ALPINE-CVE-2022-1215","description":"A format string vulnerability was found in libinput","status":"published","published":"2022-06-02T14:15:32.187Z","modified":"2026-11-03T07:31:05.06189601Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:50:01.054176Z"},{"id":"AZL-9861","title":"CVE-2022-1215 affecting package libinput for versions less than 1.21.0-1","description":"A format string vulnerability was found in libinput","status":"published","published":"2022-06-02T14:15:32Z","modified":"2026-04-21T04:35:10.070375Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:12.596039Z"},{"id":"DEBIAN-CVE-2022-1215","description":"A format string vulnerability was found in libinput","status":"published","published":"2022-06-02T14:15:32.187Z","modified":"2026-11-03T08:00:25.483127163Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:25:15.646766Z"},{"id":"OESA-2022-1709","title":"libinput security update","description":"libinput is a library to handle input devices in Wayland compositors and to provide a generic X.Org input driver.It provides device detection, device handling, input device event processing and abstraction so minimize the amount of custom input code compositors need to provide the common set of functionality that users expect.\n\r\n\r\nSecurity Fix(es):\r\n\r\nA format string vulnerability was found in libinput(CVE-2022-1215)","status":"published","published":"2022-06-17T11:04:59Z","modified":"2026-08-18T01:16:41.3195035Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:5257","title":"Red Hat Security Advisory: libinput security update","status":"published","published":"2024-09-16T08:07:23Z","modified":"2026-06-26T12:22:29.197350597Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:5331","title":"Red Hat Security Advisory: libinput security update","status":"published","published":"2024-09-16T08:07:15Z","modified":"2026-06-26T12:22:29.267298334Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RLSA-2022:5257","title":"Moderate: libinput security update","description":"libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices.\n\nSecurity Fix(es):\n\n* libinput: format string vulnerability may lead to privilege escalation (CVE-2022-1215)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-06-28T08:28:40Z","modified":"2026-02-04T13:00:07.801283Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:5331","title":"Moderate: libinput security update","description":"libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices.\n\nSecurity Fix(es):\n\n* libinput: format string vulnerability may lead to privilege escalation (CVE-2022-1215)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-06-28T10:54:07Z","modified":"2026-02-05T00:45:07.077738Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-1215","description":"A format string vulnerability was found in libinput","status":"published","published":"2022-04-27T00:00:00Z","modified":"2026-04-22T13:12:52.41293Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:51.630172Z"},{"id":"ALSA-2022:5257","title":"Moderate: libinput security update","description":"libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices.\nSecurity Fix(es):\n* libinput: format string vulnerability may lead to privilege escalation (CVE-2022-1215)\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-06-30T00:00:00Z","modified":"2026-10-29T11:31:11.338861604Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CLSA-2026-1776957467","title":"libinput: Fix of CVE-2022-1215","description":"- CVE-2022-1215: strip format directives from device name","status":"published","published":"2026-04-25T08:40:58Z","modified":"2026-06-01T00:33:18.477186237Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CVE-2022-1215","description":"A format string vulnerability was found in libinput","status":"published","published":"2022-05-31T00:00:00Z","modified":"2026-10-28T02:31:09.403367757Z","cwes":["CWE-134"],"updated_at":"2026-11-02T15:44:23.245966Z"},{"id":"MGASA-2022-0150","title":"Updated libinput packages fix security vulnerability","description":"libinput could be made to crash or expose sensitive information.\n(CVE-2022-1215)\n","status":"published","published":"2022-04-23T17:22:42Z","modified":"2026-04-16T04:43:32.150869258Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2024:12023-1","title":"libinput-devel-1.20.1-2.1 on GA media","description":"These are all security issues fixed in the libinput-devel-1.20.1-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:19:19.149925Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:1305-1","title":"Security update for libinput","description":"This update for libinput fixes the following issues:\n\n- CVE-2022-1215: Fixed a format string vulnerability (bsc#1198111).\n","status":"published","published":"2022-04-22T13:26:56Z","modified":"2026-02-04T02:38:21.059502Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"USN-5382-1","title":"libinput vulnerability","description":"Albin Eldstål-Ahrens and Lukas Lamster discovered libinput did not properly\nhandle input devices with specially crafted names. A local attacker with\nphysical access could use this to cause libinput to crash or expose\nsensitive information.\n","status":"published","published":"2022-04-20T21:36:48Z","modified":"2026-04-22T10:23:07.288039Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5382-2","title":"libinput vulnerability","description":"USN-5382-1 fixed a vulnerability in libinput. This update provides the\ncorresponding updates for Ubuntu 22.04 LTS.\n\nOriginal advisory details:\n\n Albin Eldstål-Ahrens and Lukas Lamster discovered libinput did not properly\n handle input devices with specially crafted names. A local attacker with\n physical access could use this to cause libinput to crash or expose\n sensitive information.\n","status":"published","published":"2022-05-02T06:27:33Z","modified":"2026-04-22T10:23:01.792047Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}