CVE-2023-42447

🗓️ 19 Sep 2023 14:57:16Reported by GitHub_MType

blurhash-rs is a Rust implementation of Blurhash, with multiple panic-guarded out-of-bounds accesses in version 0.1.1. Upgrade to version 0.2.0 to fix

Reporter	Title	Published	Views	Family All 15
Circl	CVE-2023-42447	19 Sep 202318:29	–	circl
CNNVD	blurhash-rs security vulnerability	19 Sep 202300:00	–	cnnvd
Cvelist	CVE-2023-42447 blurhash panics on parsing crafted inputs	19 Sep 202314:57	–	cvelist
EUVD	EUVD-2023-2491	3 Oct 202520:07	–	euvd
Github Security Blog	blurhash panics on parsing crafted inputs	21 Sep 202317:10	–	github
NVD	CVE-2023-42447	19 Sep 202315:15	–	nvd
OSV	CVE-2023-42447 blurhash panics on parsing crafted inputs	19 Sep 202314:57	–	osv
OSV	GHSA-CXVP-82CQ-57H2 blurhash panics on parsing crafted inputs	21 Sep 202317:10	–	osv
OSV	RUSTSEC-2023-0083 blurhash: panic on parsing crafted blurhash inputs	19 Sep 202312:00	–	osv
Prion	Design/Logic Flaw	19 Sep 202315:15	–	prion

NVD

Vulners

Node

whisperfish blurhash-rsMatch0.1.1rust

[
  {
    "vendor": "whisperfish",
    "product": "blurhash-rs",
    "versions": [
      {
        "version": "= 0.1.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/whisperfish/blurhash-rs/security/advisories/GHSA-cxvp-82cq-57h2

21 Nov 2024 08:22Current

8High risk

Vulners AI Score8

CVSS 3.17.5 - 8.6

EPSS0.00517

SSVC

blurhash-rs rust implementation encoding images ascii parsing code out-of-bounds access vulnerability cve-2023-42447