Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-7731

Опубликовано: 22 фев. 2018
Источник: redhat
CVSS3: 3.3

Описание

An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FormatSupport/WEBP_Support.cpp does not check whether a bitstream has a NULL value, leading to a NULL pointer dereference in the WEBP::VP8XChunk class.

Отчет

This issue did not affect the versions of Exempi as shipped with Red Hat Enterprise Linux 6 and 7 as they did not include support for WebP file format.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6exempiNot affected
Red Hat Enterprise Linux 7exempiNot affected
Red Hat Enterprise Linux 8exempiNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=1555164exempi: NULL pointer dereference in XMPFiles/source/FormatSupport/WEBP_Support.cpp:WEBP::VP8XChunk allows for denial of service via crafted file

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 8 лет назад

An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FormatSupport/WEBP_Support.cpp does not check whether a bitstream has a NULL value, leading to a NULL pointer dereference in the WEBP::VP8XChunk class.

CVSS3: 5.5
nvd
почти 8 лет назад

An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FormatSupport/WEBP_Support.cpp does not check whether a bitstream has a NULL value, leading to a NULL pointer dereference in the WEBP::VP8XChunk class.

CVSS3: 5.5
debian
почти 8 лет назад

An issue was discovered in Exempi through 2.4.4. XMPFiles/source/Forma ...

CVSS3: 5.5
github
больше 3 лет назад

An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FormatSupport/WEBP_Support.cpp does not check whether a bitstream has a NULL value, leading to a NULL pointer dereference in the WEBP::VP8XChunk class.

3.3 Low

CVSS3