CVE-2022-36752

CVE-2022-36752 설명 png2webp v1.0.4에서 w2p 함수를 통해 힙 버퍼 오버플로우out-of-bounds write가 발생하는 것으로 확인되었습니다. 이 취약점은 포맷을 PNG로 다시 변환할 때 조작된 webp 파일을 통해 악용될 수 있습니다. 재현 취약점을 재현하려면 취약한 버전의 png2webpv1.0.4를 다운로드하고 프로젝트를 컴파일하세요: git clone https://github.com/landfillbaby/png2webp.git cd png2webp git checkout...

CVE-2022-36752

png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. This vulnerability is exploitable via a crafted png file...

CVE-2022-36752

png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. This vulnerability is exploitable via a crafted png file...

CVE-2022-36752

CVE-2022-36752 affects png2webp v1.0.4, where an out-of-bounds write occurs in the w2p() function and can be triggered by a crafted PNG file. The vulnerability is described across multiple feeds as enabling a write past bounds, with CVSSv3.1 indicating local access, low attack complexity, and use...

CVE-2022-36752

png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. This vulnerability is exploitable via a crafted png file...

PT-2022-23605 · Png2Webp · Png2Webp

Name of the Vulnerable Software and Affected Versions: png2webp version 1.0.4 Description: The issue is related to an out-of-bounds write via the function w2p. This can be exploited through a crafted png file. Recommendations: For png2webp version 1.0.4, consider disabling the w2p function until ...

png2webp 缓冲区错误漏洞

png2webp is a simple command line converter from Lucinda May Phipps personal developer. It is used to batch process PNG to WebP. A security vulnerability exists in png2webp version v1.0.4, which stems from the discovery of out-of-bounds writes via the w2p function...