CVE-2022-4450

CVE-2022-4450 is a double-free vulnerability in OpenSSL's PEM_read_bio_ex() function and its wrappers, affecting OpenSSL versions and products like Stormshield Network Security. An attacker can craft a malicious PEM file that, when parsed, causes a double-free error, leading to a denial-of-service (DoS) attack. Rated as High severity (CVSS 7.5), this vulnerability can be exploited remotely with low attack complexity. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion, indicating awareness within the cybersecurity community.