CVE-2022-46149

CVE-2022-46149 is an out-of-bounds read vulnerability in Cap'n Proto, a data interchange format and RPC system, affecting versions prior to 0.7.1, 0.8.1, 0.9.2, and 0.10.3, as well as specific versions of its Rust implementation. This flaw, stemming from a logic error in list-of-list handling, can lead to remote denial-of-service (segfault) and potential memory exfiltration if a victim performs specific actions on a list-of-pointer type. Rated Medium severity (CVSS 5.4), it requires user interaction (UI:R) and a specific sequence of application actions for exploitation. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.