Heap overflow

ngiflib 0.4 has a heap-based buffer overflow in WritePixels in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled...

CVE-2019-16346

ngiflib 0.4 has a heap-based buffer overflow in WritePixel in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled...

CVE-2019-16346

CVE-2019-16346 concerns ngiflib 0.4, where a heap-based buffer overflow occurs in WritePixel() of ngiflib.c when invoked via DecodeGifImg. The root cause is described as mishandled deinterlacing for small pictures, leading to memory corruption. The available references document this vulnerability...

CVE-2019-16347

The vulnerability CVE-2019-16347 affects ngiflib 0.4, describing a heap-based buffer overflow in WritePixels() within ngiflib.c when DecodeGifImg is invoked. The root cause is mishandled deinterlacing for small pictures, which streams into a heap overflow condition. The connected advisories (Red ...

CVE-2019-16347

ngiflib 0.4 has a heap-based buffer overflow in WritePixels in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled...

Design/Logic Flaw

ngiflib.c in MiniUPnP ngiflib 0.4 has an infinite loop in DecodeGifImg and LoadGif...

CVE-2018-11657

ngiflib.c in MiniUPnP ngiflib 0.4 has an infinite loop in DecodeGifImg and LoadGif...

CVE-2018-11657

ngiflib.c in MiniUPnP ngiflib 0.4 has an infinite loop in DecodeGifImg and LoadGif...

CVE-2018-11657

ngiflib.c in MiniUPnP ngiflib 0.4 has an infinite loop in DecodeGifImg and LoadGif...

Stack overflow

ngiflib.c in MiniUPnP ngiflib 0.4 has a stack-based buffer overflow in DecodeGifImg...

CVE-2018-11575

ngiflib.c in MiniUPnP ngiflib 0.4 has a stack-based buffer overflow in DecodeGifImg...

CVE-2018-11575

ngiflib.c in MiniUPnP ngiflib 0.4 has a stack-based buffer overflow in DecodeGifImg...

CVE-2018-11575

ngiflib.c in MiniUPnP ngiflib 0.4 has a stack-based buffer overflow in DecodeGifImg...

MiniUPnP ngiflib Buffer Overflow Vulnerability

MiniUPnP is a set of UPnP tools developed by MiniUPnP project that can be used in embedded systems. This tool enables devices in home and corporate networks to connect to each other. ngiflib is one of the GIF image format decoding libraries written in C language. A buffer overflow vulnerability...

Heap overflow

The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 does not consider the bounds of the pixels data structure, which allows remote attackers to cause a denial of service WritePixels heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted...

CVE-2018-10717

The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 does not consider the bounds of the pixels data structure, which allows remote attackers to cause a denial of service WritePixels heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted...

CVE-2018-10677

The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 lacks certain checks against width and height, which allows remote attackers to cause a denial of service WritePixels heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted GIF file...

Heap overflow

The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 lacks certain checks against width and height, which allows remote attackers to cause a denial of service WritePixels heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted GIF file...

CVE-2018-10677

The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 lacks certain checks against width and height, which allows remote attackers to cause a denial of service WritePixels heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted GIF file...

CVE-2018-10677

Summary: The vulnerability affects MiniUPnP ngiflib 0.4, specifically the DecodeGifImg function in ngiflib.c, which does not correctly validate width/height bounds. This lack of validation can enable a remote attacker to trigger a denial of service via a heap-based WritePixels buffer overflow and...