CVE-2022-40661

CVE-2022-40661 is a heap-based buffer overflow vulnerability in NIKON NIS-Elements Viewer 1.2100.1483.0, specifically within its BMP image parsing functionality. This flaw allows remote attackers to achieve arbitrary code execution if a user opens a malicious BMP file or visits a malicious web page. Rated with a CVSS score of 7.8 (High), this vulnerability requires user interaction (UI:R) and has a low attack complexity (AC:L), but can lead to complete compromise of confidentiality, integrity, and availability (C:H, I:H, A:H). The attacker needs to trick the victim into interacting with malicious content. Currently, there is no public exploit code available (Metasploit, Nuclei, ExploitDB), nor is it listed on CISA's KEV catalog. Community discussion and media coverage are also absent, indicating a low level of public awareness or active exploitation.