nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-33896 CVE-2022-33896
HIGH
hancom hancom_office_2020 Buffer Underwrite ('Buffer Underflow')
Record summary
CVE-2022-33896 has a selected CVSS score of 7.8 (high).
Description
A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A specially-crafted malformed file can cause memory corruption by using memory before buffer start, which can lead to code execution. A victim would need to access a malicious file to trigger this vulnerability.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · Oct 27, 2025 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 15, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Hancom Office 2020Browse Hancom / Hancom Office 2020 | CVE List, VulnCheck | Hancom Office 2020 11.0.0.5357 | affected |
References
2talosintelligence.com
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1574