dmg2img Heap Buffer Overflow DoS

The vulnerability of the fillmishblk function in the dmg2img conversion tool involves checking the length of the read and write buffer bytes 0xCC. Exploiting this vulnerability can allow an attacker to gain access to confidential data and also cause service interruptions...

CVE-2021-32614

A flaw was found in dmg2img through 20170502. fillmishblk does not check the length of the read buffer, and copy 0xCC bytes from it. The length of the buffer is controlled by an attacker. By providing a length smaller than 0xCC, memcpy reaches out of the malloc'ed bound. This possibly leads to...

UBUNTU-CVE-2021-32614

A flaw was found in dmg2img through 20170502. fillmishblk does not check the length of the read buffer, and copy 0xCC bytes from it. The length of the buffer is controlled by an attacker. By providing a length smaller than 0xCC, memcpy reaches out of the malloc'ed bound. This possibly leads to...

PT-2021-4258

Name of the Vulnerable Software and Affected Versions dmg2img versions through 20170502 Description A flaw was found in the fill mishblk function, which does not check the length of the read buffer and copies 0xCC bytes from it. The length of the buffer is controlled by an attacker, allowing for ...