exploitDog

CVE-2022-36752

Опубликовано: 28 июл. 2022

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. This vulnerability is exploitable via a crafted png file.

Ссылки

https://github.com/landfillbaby/png2webp/commit/8f21ad79b0cd98fc22d5b49734543101946abbff
Patch
Third Party Advisory
https://github.com/landfillbaby/png2webp/issues/3
Exploit
Issue Tracking
Patch
Third Party Advisory
https://github.com/landfillbaby/png2webp/commit/8f21ad79b0cd98fc22d5b49734543101946abbff
Patch
Third Party Advisory
https://github.com/landfillbaby/png2webp/issues/3
Exploit
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:png2webp_project:png2webp:1.0.4:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.02021

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-787

Связанные уязвимости

GHSA-fjx2-q792-pjxm

CVSS3: 5.5

github

больше 3 лет назад

png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. This vulnerability is exploitable via a crafted png file.

EPSS

Процентиль: 83%

0.02021

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-787