CVE-2022-24778

CVE-2022-24778 is a high-severity authorization bypass vulnerability affecting imgcrypt versions prior to 1.1.4, including those used in Fedora. It allows unauthorized users to run previously decrypted container images if the image uses a ManifestList and the host architecture is not the first in the list. The vulnerability has a CVSS score of 7.5 (High), indicating that it can be exploited remotely with low attack complexity, potentially leading to high confidentiality impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.