Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-1325

Опубликовано: 31 авг. 2022
Источник: nvd
CVSS3: 5.5
EPSS Низкий

Описание

A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is possible to trick the application into allocating huge buffer sizes like 64 Gigabyte upon reading the file from disk or from a virtual buffer.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:cimg:cimg:*:*:*:*:*:*:*:*
Версия до 3.1.0 (исключая)

EPSS

Процентиль: 23%
0.00078
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-400
CWE-770

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 3 лет назад

A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is possible to trick the application into allocating huge buffer sizes like 64 Gigabyte upon reading the file from disk or from a virtual buffer.

CVSS3: 5.5
debian
больше 3 лет назад

A flaw was found in Clmg, where with the help of a maliciously crafted ...

CVSS3: 5.5
github
больше 3 лет назад

A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is possible to trick the application into allocating huge buffer sizes like 64 Gigabyte upon reading the file from disk or from a virtual buffer.

EPSS

Процентиль: 23%
0.00078
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-400
CWE-770