cve/2022/CVE-2022-38668.md

### [CVE-2022-38668](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38668)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack memory when fulfilling a request for a static file smaller than 16 KB.

### POC

#### Reference
- https://github.com/0xhebi/CVEs/blob/main/Crow/CVE-2022-38668.md
- https://gynvael.coldwind.pl/?id=752

#### Github
- https://github.com/ARPSyndicate/cvemon