Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m85m-8745-r3wh

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type.

In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type.

EPSS

Процентиль: 61%
0.00409
Низкий

8.8 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 8 лет назад

In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type.

CVSS3: 8.8
nvd
около 8 лет назад

In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type.

CVSS3: 8.8
debian
около 8 лет назад

In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buf ...

CVSS3: 8.8
fstec
около 8 лет назад

Уязвимость функции WriteWEBPImage (coders/webp.c) кроссплатформенной библиотеки для работы с графикой GraphicsMagick, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 61%
0.00409
Низкий

8.8 High

CVSS3

Дефекты

CWE-125