CVE-2022-28882: F-Secure Atlant

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A Denial-of-Service (DoS) vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. This eventually leads to scanning engine crash. The exploit can be triggered remotely by an attacker.

Affected products

• F-Secure Atlant: any version
• F-Secure Cloud Protection For Salesforce: any version
• F-Secure Elements Collaboration Protection: any version
• F-Secure Elements Endpoint Protection: any version
• F-Secure Internet Gatekeeper: any version
• F-Secure Linux Security: any version
• F-Secure Linux Security 64: any version

Published 2022-08-23. Last modified 2026-06-17.