CVE-2022-47933: Brave

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted HTML file that references the IPFS scheme. This vulnerability is caused by an uncaught exception in the function ipfs::OnBeforeURLRequest_IPFSRedirectWork() in ipfs_redirect_network_delegate_helper.cc.

Affected products

• Brave Brave: before 1.42.51 (fixed in 1.42.51)

Published 2022-12-24. Last modified 2026-06-17.