Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2022-4741

22
FAUCET Score

CVE-2022-4741 is a problematic uncontrolled memory allocation vulnerability affecting docconv versions up to 1.2.0, specifically within its document conversion functions (ConvertDocx, ConvertODT, ConvertPages, ConvertXML, XMLToText). This medium-severity vulnerability (CVSS 6.5) can be exploited remotely with low attack complexity, potentially leading to a denial of service (high availability impact). While no active exploitation, public exploit code, or significant community discussion has been observed, upgrading to docconv version 1.2.1 is recommended to mitigate the risk.

Impacted Technologies

VendorProductVersion(s)CPE
< 1.2.1CPE matchmatch criteria
cpe:2.3:a:search:docconv:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

4.3MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
Exploitability Score
2.8
Impact Score
1.4
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.76%
Probability of exploitation in next 30 days
EPSS Percentile
51.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0076 is in the 59th percentile among its peer group of 26,209 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (3)

github_advisorypatch availablevia nvd_reference
View patch
gopatch availablevia ghsa
Product: github.com/sajari/docconvFixed in: 1.2.1
gopatch availablevia ghsa
Product: code.sajari.com/docconvFixed in: 1.2.1

Vendor Advisories (1)

goGHSA-qvx2-59g8-8hphmedium

docconv vulnerable to Memory Allocation with Excessive Size Value

Dec 25, 2022

References

github.com / sajari/docconv/commit/42bcff666855ab978e67a9041d0cdea552f20301
PatchThird Party Advisory
github.com / sajari/docconv/pull/111
PatchThird Party Advisory
github.com / sajari/docconv/releases/tag/v1.2.1
Release NotesThird Party Advisory
vuldb.com
Third Party Advisory
vuldb.com
Third Party Advisory