Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-589q-f3gp-p53f

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image.

libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image.

EPSS

Процентиль: 64%
0.00475
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-908

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 7 лет назад

libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image.

CVSS3: 5.3
nvd
около 7 лет назад

libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image.

CVSS3: 5.3
debian
около 7 лет назад

libvips before 8.7.4 generates output images from uninitialized memory ...

EPSS

Процентиль: 64%
0.00475
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-908