CVE-2017-7623

2017-04-1017:59:00

Google

osv.dev

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

48.2%

JSON

The iwmiffr_convert_row32 function in imagew-miff.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file.

References

www.securityfocus.com/bid/97577

github.com/jsummers/imageworsener/issues/12