PT-2018-7112 · Bpg+1 · Libbpg+1
Publicado
2018-08-22
·
Atualizado
2019-10-09
·
CVE-2017-2575
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
libbpg version 0.9.7
Description:
A NULL pointer dereference issue was discovered in the BPG encoder due to a missing check of the return value of the
malloc function. This issue occurs when converting a malicious JPEG file to BPG.Recommendations:
For libbpg version 0.9.7, consider adding a check for the return value of the
malloc function in the BPG encoder to prevent NULL pointer dereferences. As a temporary workaround, restrict the conversion of untrusted JPEG files to BPG until a patch is available.Correção
Buffer Overflow
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Libbpg