Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-66c4-8x32-4mx8

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand() and results in a memory corruption that leads to code execution when parsing a crafted PDF book.

Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand() and results in a memory corruption that leads to code execution when parsing a crafted PDF book.

EPSS

Процентиль: 75%
0.00884
Низкий

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 8.6
nvd
больше 4 лет назад

Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand() and results in a memory corruption that leads to code execution when parsing a crafted PDF book.

CVSS3: 8.6
fstec
больше 4 лет назад

Уязвимость функции CJBig2Image::expand() устройств для чтения электронных книг Amazon Kindle, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 75%
0.00884
Низкий

Дефекты

CWE-190