Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w9qw-39gf-jp7r

Опубликовано: 01 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

A heap buffer overflow vulnerability has been identified in the lcms2-2.16. The vulnerability exists in the UnrollChunkyBytes function in cmspack.c, which is responsible for handling color space transformations.

A heap buffer overflow vulnerability has been identified in the lcms2-2.16. The vulnerability exists in the UnrollChunkyBytes function in cmspack.c, which is responsible for handling color space transformations.

EPSS

Процентиль: 56%
0.00336
Низкий

7.3 High

CVSS3

Дефекты

CWE-122

Связанные уязвимости

CVSS3: 7.3
ubuntu
10 месяцев назад

A heap buffer overflow vulnerability has been identified in the lcms2-2.16. The vulnerability exists in the UnrollChunkyBytes function in cmspack.c, which is responsible for handling color space transformations. NOTE: this is disputed by the Supplier because the finding identified a bug in a third-party calling program, not in lcms.

CVSS3: 7.3
nvd
10 месяцев назад

A heap buffer overflow vulnerability has been identified in the lcms2-2.16. The vulnerability exists in the UnrollChunkyBytes function in cmspack.c, which is responsible for handling color space transformations. NOTE: this is disputed by the Supplier because the finding identified a bug in a third-party calling program, not in lcms.

CVSS3: 7.3
debian
10 месяцев назад

A heap buffer overflow vulnerability has been identified in the lcms2- ...

EPSS

Процентиль: 56%
0.00336
Низкий

7.3 High

CVSS3

Дефекты

CWE-122