CVE-2021-36531

2021-08-2716:15:07

Google

osv.dev

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.5%

ngiflib 0.4 has a heap overflow in GetByte() at ngiflib.c:70 in NGIFLIB_NO_FILE mode, GetByte() reads memory buffer without checking the boundary.

CPENameOperatorVersion
ngiflibeq0.1
ngiflibeq0.4
ngiflibeq0.2

Name	Operator	Version
ngiflib	eq	0.1
ngiflib	eq	0.4
ngiflib	eq	0.2

References

github.com/miniupnp/ngiflib/issues/18