CVE-2018-10677

2018-05-0219:00:00

mitre

www.cve.org

9.2 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.1%

JSON

The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 lacks certain checks against width and height, which allows remote attackers to cause a denial of service (WritePixels heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted GIF file.