Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-25693

Опубликовано: 03 дек. 2020
Источник: nvd
CVSS3: 8.1
CVSS2: 5.8
EPSS Низкий

Описание

A flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer overflows in load_pnm() can be triggered by a specially crafted input file processed by CImg, which can lead to an impact to application availability or data integrity.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:cimg:cimg:*:*:*:*:*:*:*:*
Версия до 2.9.3 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

EPSS

Процентиль: 68%
0.00558
Низкий

8.1 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-190
CWE-190

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 5 лет назад

A flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer overflows in load_pnm() can be triggered by a specially crafted input file processed by CImg, which can lead to an impact to application availability or data integrity.

CVSS3: 8.1
debian
около 5 лет назад

A flaw was found in CImg in versions prior to 2.9.3. Integer overflows ...

github
больше 3 лет назад

A flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer overflows in load_pnm() can be triggered by a specially crafted input file processed by CImg, which can lead to an impact to application availability or data integrity.

CVSS3: 8.1
fstec
больше 5 лет назад

Уязвимость функции load_pnm() библиотеки CImg, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 68%
0.00558
Низкий

8.1 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-190
CWE-190