Lucene search

K
osvGoogleOSV:CVE-2018-11489
HistoryMay 26, 2018 - 6:29 p.m.

CVE-2018-11489

2018-05-2618:29:00
Google
osv.dev
3

9.2 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

83.1%

The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain CrntCode array index is not checked. This will lead to a denial of service or possibly unspecified other impact.

CPENameOperatorVersion
sam2peq0.49.3
sam2peq0.49.2
sam2peq0.49.4

9.2 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

83.1%