Lucene search
+L

8 matches found

Github Security Blog
Github Security Blog
•added 2021/12/10 5:23 p.m.•62 views

Integer Overflow in png-img

An integer overflow in the PngImg::InitStorage function of png-img before 3.1.0 leads to an under-allocation of heap memory and subsequently an exploitable heap-based buffer overflow when loading a crafted PNG file...

8.8CVSS8.6AI score0.02216EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2021/02/20 12:15 a.m.•18 views

CVE-2020-28248

An integer overflow in the PngImg::InitStorage function of png-img before 3.1.0 leads to an under-allocation of heap memory and subsequently an exploitable heap-based buffer overflow when loading a crafted PNG file...

8.8CVSS7.3AI score
SaveExploits0References4
NVD
NVD
•added 2021/02/20 12:15 a.m.•30 views

CVE-2020-28248

An integer overflow in the PngImg::InitStorage function of png-img before 3.1.0 leads to an under-allocation of heap memory and subsequently an exploitable heap-based buffer overflow when loading a crafted PNG file...

8.8CVSS0.02216EPSS
SaveExploits1References4
Prion
Prion
•added 2021/02/20 12:15 a.m.•19 views

Design/Logic Flaw

An integer overflow in the PngImg::InitStorage function of png-img before 3.1.0 leads to an under-allocation of heap memory and subsequently an exploitable heap-based buffer overflow when loading a crafted PNG file...

6.8CVSS8.8AI score0.02216EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2021/02/19 11:05 p.m.•1 views

CVE-2020-28248

An integer overflow in the PngImg::InitStorage function of png-img before 3.1.0 leads to an under-allocation of heap memory and subsequently an exploitable heap-based buffer overflow when loading a crafted PNG file...

8.8CVSS0.02216EPSS
SaveExploits1References5
CVE
CVE
•added 2021/02/19 11:05 p.m.•116 views

CVE-2020-28248

CVE-2020-28248 affects png-img up to version 3.0.x (before 3.1.0). The issue is an integer overflow in PngImg::InitStorage_() that under-allocates heap memory, leading to a heap-based buffer overflow while loading a crafted PNG. Impact is a memory corruption risk that can cause a crash or potenti...

8.8CVSS8.8AI score0.02216EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/19 12:00 a.m.•4 views

CVE-2020-28248: Integer Overflow or Wraparound

An integer overflow in the PngImg::InitStorage function of png-img before 3.1.0 leads to an under-allocation of heap memory and subsequently an exploitable heap-based buffer overflow when loading a crafted PNG file...

8.8CVSS6.1AI score0.02216EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/02/19 12:00 a.m.•3 views

PT-2021-11460

Name of the Vulnerable Software and Affected Versions: png-img versions prior to 3.1.0 Description: The issue is caused by an integer overflow in the PngImg::InitStorage function, leading to under-allocation of heap memory. This results in a heap-based buffer overflow when a crafted PNG file is...

8.8CVSS6AI score0.02216EPSS
SaveExploits1References8
Rows per page
Query Builder