4 matches found
CVE-2021-32614
A flaw was found in dmg2img through 20170502. fillmishblk does not check the length of the read buffer, and copy 0xCC bytes from it. The length of the buffer is controlled by an attacker. By providing a length smaller than 0xCC, memcpy reaches out of the malloc'ed bound. This possibly leads to...
CVE-2021-32614
A flaw was found in dmg2img through 20170502. fillmishblk does not check the length of the read buffer, and copy 0xCC bytes from it. The length of the buffer is controlled by an attacker. By providing a length smaller than 0xCC, memcpy reaches out of the malloc'ed bound. This possibly leads to...
CVE-2021-32614
CVE-2021-32614 affects dmg2img up to 20170502. The flaw: fill_mishblk() does not validate the length of the read buffer and copies 0xCC bytes from it. An attacker-controlled buffer length allows memcpy to read beyond the malloc’d bound, potentially leaking memory layout information and possibly e...
CVE-2021-32614
A flaw was found in dmg2img through 20170502. fillmishblk does not check the length of the read buffer, and copy 0xCC bytes from it. The length of the buffer is controlled by an attacker. By providing a length smaller than 0xCC, memcpy reaches out of the malloc'ed bound. This possibly leads to...