Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h77p-hrmm-5v85

Опубликовано: 27 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive

EPSS

Процентиль: 4%
0.00139
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 5.5
ubuntu
6 месяцев назад

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive

CVSS3: 6.2
redhat
6 месяцев назад

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive

CVSS3: 5.5
nvd
6 месяцев назад

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via the pngimage with AddressSanitizer (ASan), the program leaks memory in various locations, eventually leading to high memory usage and causing the program to become unresponsive

CVSS3: 5.5
debian
6 месяцев назад

Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local a ...

CVSS3: 5.5
fstec
6 месяцев назад

Уязвимость библиотеки libpng, связанная с копированием буфера без проверки размера входных данных, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 4%
0.00139
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-120