CVE-2022-42920

CVE-2022-42920 is a critical out-of-bounds write vulnerability in Apache Commons BCEL, affecting versions of apache commons_bcel and fedoraproject fedora. This flaw allows attackers to manipulate specific APIs to generate arbitrary bytecode, potentially granting them significant control over applications that process attacker-controlled data. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness and potential interest among researchers.