Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-99295
HistorySep 23, 2021 - 12:00 a.m.

libiff buffer overflow vulnerability

2021-09-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
libiff
buffer overflow
parser library
ea-iff 85
ansi c
error.c
vulnerability
code execution

EPSS

0.002

Percentile

60.5%

libiff is a portable and extensible parser library for EA-IFF 85 implemented in ANSI C. A global buffer overflow vulnerability exists in the IFF_errorId function in error.c in libiff 20190123 and earlier versions. An attacker could exploit this vulnerability to execute code.

EPSS

0.002

Percentile

60.5%

Related for CNVD-2021-99295