CVE-2017-9093

2017-05-1919:29:00

Google

osv.dev

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

50.1%

JSON

The my_skip_input_data_fn function in imagew-jpeg.c in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted image.

References

github.com/jsummers/imageworsener/issues/26