Q: What is CVE-2022-45412 — CVE-2022-45412?

When resolving a symlink such as file:///proc/self/fd/1 , an error message may be produced where the symlink was resolved to a string containing unitialized memory in the buffer. *This bug only affects Thunderbird on Unix-based operated systems (Android, Linux, MacOS).

Question 1

What is CVE-2022-45412 — CVE-2022-45412?

Accepted Answer

When resolving a symlink such as file:///proc/self/fd/1, an error message may be produced where the symlink was resolved to a string containing unitialized memory in the buffer.
*This bug only affects Thunderbird on Unix-based operated systems (Android, Linux, MacOS).

Question 2

What is the authoritative source for CVE-2022-45412?

Accepted Answer

CVE-2022-45412 (CVE-2022-45412) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVSS	8.8 ()
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS	0.79% probability of exploitation · percentile 51.4% · 2026-06-19T12:03:05Z
Last modified	2026-06-17

CVE-2022-45412CVE-2022-45412

Description

Scoring