CVE-2017-7624

2017-04-1017:59:00

Google

osv.dev

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

48.2%

JSON

The iw_read_bmp_file function in imagew-bmp.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to consume an amount of available memory via a crafted file.

References

www.securityfocus.com/bid/97575

github.com/jsummers/imageworsener/issues/10