CVE-2022-28884: F-Secure Internet Gatekeeper

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine.

Affected products

• F-Secure Internet Gatekeeper: affected versions not specified
• F-Secure Linux Security: affected versions not specified
• Withsecure Business Suite: affected versions not specified
• Withsecure Elements Endpoint Protection: any version

Published 2022-09-06. Last modified 2026-06-17.