Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5vr5-4x8v-hcfp

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted bmp file.

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted bmp file.

EPSS

Процентиль: 80%
0.02112
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 9 лет назад

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted bmp file.

CVSS3: 3.3
redhat
почти 9 лет назад

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted bmp file.

CVSS3: 6.5
nvd
почти 9 лет назад

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted bmp file.

CVSS3: 6.5
debian
почти 9 лет назад

Integer overflow vulnerability in the bmp24toimage function in convert ...

suse-cvrf
почти 9 лет назад

Security update for openjpeg2

EPSS

Процентиль: 80%
0.02112
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-190