Lucene search
HistoryNov 07, 2022 - 11:15 p.m.
CVE-2022-43359
gifdec
commit
out-of-bounds
read_image_data
vulnerability
parsing
crafted gif file
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
46.5%
Gifdec commit 1dcbae19363597314f6623010cc80abad4e47f7c was discovered to contain an out-of-bounds read in the function read_image_data. This vulnerability is triggered when parsing a crafted Gif file.
Affected configurations
Node
gifdec_projectgifdecMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| gifdec_project | gifdec | - | cpe:2.3:a:gifdec_project:gifdec:-:*:*:*:*:*:*:* |
References
Related
cve
cve
CVE-2022-43359
2022-11-07 23:15:09
prion
prion
Out-of-bounds
2022-11-07 23:15:00
cvelist
cvelist
CVE-2022-43359
2022-11-07 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
46.5%
Related for NVD:CVE-2022-43359