Lucene search

K
osvGoogleOSV:CVE-2018-11490
HistoryMay 26, 2018 - 6:29 p.m.

CVE-2018-11490

2018-05-2618:29:00
Google
osv.dev
4

9.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.4%

The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-based buffer overflow because a certain “Private->RunningCode - 2” array index is not checked. This will lead to a denial of service or possibly unspecified other impact.

CPENameOperatorVersion
sam2peq0.49.3
sam2peq0.49.2
sam2peq0.49.4

9.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.4%