CVE-2018-11576

2018-05-3100:29:00

Google

osv.dev

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.7%

ngiflib.c in MiniUPnP ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor.

CPENameOperatorVersion
ngiflibeq0.2
ngiflibeq0.4
ngiflibeq0.1

Name	Operator	Version
ngiflib	eq	0.2
ngiflib	eq	0.4
ngiflib	eq	0.1

References

github.com/Edward-L/fuzzing-pocs/tree/master/ngiflib

github.com/miniupnp/ngiflib/issues/6