Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cx98-f2vw-wvr8

Опубликовано: 12 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause an out-of-bounds write issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering.

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause an out-of-bounds write issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering.

EPSS

Процентиль: 22%
0.00071
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 6.8
nvd
12 месяцев назад

NVIDIA nvJPEG2000 library contains a vulnerability where an attacker can cause an out-of-bounds write issue by means of a specially crafted JPEG2000 file. A successful exploit of this vulnerability might lead to code execution and data tampering.

CVSS3: 6.8
fstec
больше 1 года назад

Уязвимость библиотеки nvJPEG2000 программного обеспечения графического процессора NVIDIA GPU, позволяющая нарушителю выполнить произвольный код и перезаписать данные в буфере памяти

EPSS

Процентиль: 22%
0.00071
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-787