{"id":"CVE-2022-25867","aliases":["EUVD-2022-6512","GHSA-85xx-xhjm-rhrw"],"status":"published","title":"NULL Pointer Dereference","description":"The package io.socket:socket.io-client before 2.0.1 are vulnerable to NULL Pointer Dereference when parsing a packet with with invalid payload format.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01652,"percentile":0.76712,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2022-08-02T13:28:24Z","modified":"2026-10-28T10:27:37Z","fixes":[{"ecosystem":"Maven","package":"io.socket:socket.io-client","fixed_in":["2.0.1"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"io.socket:socket.io-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1"}]}]},{"source":"osv","ecosystem":"Maven","package":"io.socket:socket.io-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.1"}]}],"versions":["0.6.1","0.6.2","0.6.3","0.7.0","0.8.0","0.8.1","0.8.2","0.8.3","0.9.0","1.0.0","1.0.1","1.0.2","2.0.0"]}],"products":[{"vendor":"socket","product":"socket.io-client_java"}],"references":[{"url":"https://security.snyk.io/vuln/SNYK-JAVA-IOSOCKET-2949738","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Patch","Release Notes","Third Party Advisory","web"]},{"url":"https://github.com/socketio/socket.io-client-java/issues/508%23issuecomment-1179817361","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","report","web"]},{"url":"https://github.com/socketio/socket.io-client-java/commit/e8ffe9d1383736f6a21090ab959a2f4fa5a41284","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://github.com/socketio/socket.io-client-java/commit/8664499b6f31154f49783531f778dac5387b766b","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://github.com/socketio/socket.io-client-java/releases/tag/socket.io-client-2.0.1","tags":["x_refsource_MISC","x_transferred","Release Notes","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25867","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-85xx-xhjm-rhrw"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/25xxx/CVE-2022-25867.json","tags":["advisory"]},{"url":"https://github.com/socketio/socket.io-client-java","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2022-25867","title":"NULL Pointer Dereference","description":"The package io.socket:socket.io-client before 2.0.1 are vulnerable to NULL Pointer Dereference when parsing a packet with with invalid payload format.","status":"published","published":"2022-08-02T13:28:24.215Z","modified":"2024-09-16T22:25:32.958Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:34:28.707644Z"}],"euvd":[{"id":"EUVD-2022-6512","description":"The package io.socket:socket.io-client before 2.0.1 are vulnerable to NULL Pointer Dereference when parsing a packet with with invalid payload format.","status":"published","published":"2022-08-02T13:28:24Z","modified":"2024-09-16T22:25:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P","level":"high"}],"updated_at":"2026-11-03T00:55:02.946444Z"}],"ghsa":[{"id":"GHSA-85xx-xhjm-rhrw","title":"Socket.IO-client Java before 2.0.1 vulnerable to NULL Pointer Dereference","description":"The package io.socket:socket.io-client before 2.0.1 is vulnerable to NULL Pointer Dereference when parsing a packet with with invalid payload format.","status":"published","published":"2022-08-03T00:00:57Z","modified":"2023-01-31T05:01:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:36:29.100018Z"}],"nvd":[{"id":"CVE-2022-25867","description":"The package io.socket:socket.io-client before 2.0.1 are vulnerable to NULL Pointer Dereference when parsing a packet with with invalid payload format.","status":"published","published":"2022-08-02T14:15:10.103Z","modified":"2026-06-17T04:34:25.057Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:07:24.39467Z"}],"osv":[{"id":"CVE-2022-25867","title":"NULL Pointer Dereference","description":"The package io.socket:socket.io-client before 2.0.1 are vulnerable to NULL Pointer Dereference when parsing a packet with with invalid payload format.","status":"published","published":"2022-08-02T13:28:24.215Z","modified":"2026-10-28T10:27:37.598177712Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P","level":"high"}],"updated_at":"2026-11-02T15:44:24.758293Z"},{"id":"GHSA-85xx-xhjm-rhrw","title":"Socket.IO-client Java before 2.0.1 vulnerable to NULL Pointer Dereference","description":"The package io.socket:socket.io-client before 2.0.1 is vulnerable to NULL Pointer Dereference when parsing a packet with with invalid payload format.","status":"published","published":"2022-08-03T00:00:57Z","modified":"2023-11-08T04:08:50.030246Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:46:41.732368Z"}]}}