ID:8628 - Exploit for Integer overflow in Oracle VM VirtualBox - CVE-2022-39425

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow when handling USB Request Block messages. A remote attacker can pass specially crafted data to the application, trigger an integer overflow and execute arbitrary code on the target system.

Remediation