Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-19500
HistoryMar 04, 2022 - 12:00 a.m.

ok-file-formats buffer overflow vulnerability (CNVD-2022-19500)

2022-03-0400:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
ok-file-formats
buffer overflow
png
jpeg
wav
vulnerability
heap overflow

EPSS

0.001

Percentile

34.8%

ok-file-formats is an open source decoder for PNG, JPEG, WAV and several other file formats. ok-file-formats suffers from a buffer overflow vulnerability that stems from a heap buffer overflow in the function ā€œ/ok_png.cā€ when using functions from the ok-file-formats project. function ok_png_read_data() in ā€œ/ok_png.cā€ is vulnerable to a heap buffer overflow. No detailed vulnerability details are currently available.

EPSS

0.001

Percentile

34.8%

Related for CNVD-2022-19500