Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4hqm-7w7w-5w4r

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free.

vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free.

EPSS

Процентиль: 82%
0.02073
Низкий

8.8 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 7 лет назад

vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free.

CVSS3: 8.8
nvd
около 7 лет назад

vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free.

CVSS3: 8.8
debian
около 7 лет назад

vips_foreign_load_gif_scan_image in foreign/gifload.c in libvips befor ...

CVSS3: 8.8
altlinux
почти 7 лет назад

ALT-PU-2020-1098: package `vips` update to version 8.9.0-alt2

EPSS

Процентиль: 82%
0.02073
Низкий

8.8 High

CVSS3

Дефекты

CWE-416