CVE-2022-28228: Ydb

Critical severity, CVSS 9.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Out-of-bounds read was discovered in YDB server. An attacker could construct a query with insert statement that would allow him to read sensitive information from other memory locations or cause a crash.

Affected products

• Ydb Ydb: before 24.4.44 (fixed in 24.4.44)

Published 2022-12-23. Last modified 2026-06-17.