Lucene search

K
cveMitreCVE-2022-43359
HistoryNov 07, 2022 - 11:15 p.m.

CVE-2022-43359

2022-11-0723:15:09
CWE-125
mitre
web.nvd.nist.gov
22
8
cve-2022-43359
gifdec
out-of-bounds read
read_image_data
vulnerability
crafted gif file
nvd

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

46.5%

Gifdec commit 1dcbae19363597314f6623010cc80abad4e47f7c was discovered to contain an out-of-bounds read in the function read_image_data. This vulnerability is triggered when parsing a crafted Gif file.

Affected configurations

Nvd
Node
gifdec_projectgifdecMatch-
VendorProductVersionCPE
gifdec_projectgifdec-cpe:2.3:a:gifdec_project:gifdec:-:*:*:*:*:*:*:*

Social References

More

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

46.5%

Related for CVE-2022-43359