CVE-2022-34970: Crowcpp Crow

Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days.

Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h. On successful exploitation this vulnerability allows attackers to remotely execute arbitrary code in the context of the vulnerable service.

Affected products

• Crowcpp Crow: before 1.0\+4 (fixed in 1.0\+4)

Published 2022-08-04. Last modified 2026-06-17.