CVE-2022-3918

CVE-2022-3918 is a CRLF injection vulnerability affecting FoundationNetworking in swift-corelibs-foundation, allowing an attacker to insert extra headers or even craft entirely new requests by injecting CRLF sequences into URLRequest header values. With a CVSS score of 8.8 (HIGH), this vulnerability has a network attack vector, low attack complexity, and can lead to high impacts on confidentiality, integrity, and availability if unsanitized user input is used in headers. While the EPSS and FAUCET Risk Score indicate a moderate to high risk, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.