CVE-2022-37290: Fedoraproject Fedora

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

GNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive.

Affected products

• Fedoraproject Fedora: version 36 only; version 37 only
• Gnome Nautilus: version 42.2 only

Published 2022-11-14. Last modified 2026-06-17.