Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:45740
HistoryMar 04, 2024 - 6:38 a.m.

Memory Leak

2024-03-0406:38:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
libming vulnerability dos swf

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

17.0%

libming/libming is vulnerable to Memory Leak. The vulnerability is due to a failure to free dynamically allocated memory for gerec->GlyphIndex, resulting in a denial of service (DoS) when processing a crafted SWF file.

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

17.0%