Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-589q-f3gp-p53f

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image.

libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image.

EPSS

Процентиль: 83%
0.02207
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-908

Связанные уязвимости

CVSS3: 5.3
ubuntu
почти 8 лет назад

libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image.

CVSS3: 5.3
nvd
почти 8 лет назад

libvips before 8.7.4 generates output images from uninitialized memory locations when processing corrupted input image data because iofuncs/memory.c does not zero out allocated memory. This can result in leaking raw process memory contents through the output image.

CVSS3: 5.3
debian
почти 8 лет назад

libvips before 8.7.4 generates output images from uninitialized memory ...

CVSS3: 8.8
altlinux
почти 7 лет назад

ALT-PU-2020-1098: package `vips` update to version 8.9.0-alt2

EPSS

Процентиль: 83%
0.02207
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-908