Lucene search
+L
Libfwsi ProjectLibfwsi

1 matches found

CVE
CVE
added 2019/10/06 9:16 p.m.100 views

CVE-2019-17263

In libyal libfwsi (before 20191006), the vulnerability CVE-2019-17263 stems from libfwsi_extension_block_copy_from_byte_stream in libfwsi_extension_block.c, which performs a heap-based buffer over-read due to improper validation of unsupported input sizes. The rejection logic only checks values

3.3CVSS4.3AI score0.0052EPSS
Save