CVE-2022-24963: Apache Portable Runtime

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Integer Overflow or Wraparound vulnerability in apr_encode functions of Apache Portable Runtime (APR) allows an attacker to write beyond bounds of a buffer. This issue affects Apache Portable Runtime (APR) version 1.7.0.

Affected products

• Apache Portable Runtime: version 1.7.0 only

Published 2023-01-31. Last modified 2026-06-17.