Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wpqw-8rxf-9cw7

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 3.3

Описание

In libyal libfwsi before 20191006, libfwsi_extension_block_copy_from_byte_stream in libfwsi_extension_block.c has a heap-based buffer over-read because rejection of an unsupported size only considers values less than 6, even though values of 6 and 7 are also unsupported.

In libyal libfwsi before 20191006, libfwsi_extension_block_copy_from_byte_stream in libfwsi_extension_block.c has a heap-based buffer over-read because rejection of an unsupported size only considers values less than 6, even though values of 6 and 7 are also unsupported.

EPSS

Процентиль: 38%
0.00163
Низкий

3.3 Low

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 3.3
ubuntu
больше 6 лет назад

In libyal libfwsi before 20191006, libfwsi_extension_block_copy_from_byte_stream in libfwsi_extension_block.c has a heap-based buffer over-read because rejection of an unsupported size only considers values less than 6, even though values of 6 and 7 are also unsupported. NOTE: the vendor has disputed this as described in the GitHub issue

CVSS3: 3.3
nvd
больше 6 лет назад

In libyal libfwsi before 20191006, libfwsi_extension_block_copy_from_byte_stream in libfwsi_extension_block.c has a heap-based buffer over-read because rejection of an unsupported size only considers values less than 6, even though values of 6 and 7 are also unsupported. NOTE: the vendor has disputed this as described in the GitHub issue

CVSS3: 3.3
debian
больше 6 лет назад

In libyal libfwsi before 20191006, libfwsi_extension_block_copy_from_b ...

EPSS

Процентиль: 38%
0.00163
Низкий

3.3 Low

CVSS3

Дефекты

CWE-125