CVE-2019-16346

High

ngiflib 0.4 has a heap-based buffer overflow in WritePixel() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small…

mitre·CWE-682·Published 2019-09-16

CVSS

8.8

EPSS

0.02

KEV

Exploits

cve.orgen

160 chars

ngiflib 0.4 has a heap-based buffer overflow in WritePixel() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled.

NVDen

160 chars

ngiflib 0.4 has a heap-based buffer overflow in WritePixel() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled.

ngiflib versión 0.4, presenta un desbordamiento de búfer en la región heap de la memoria en la función WritePixel() en la biblioteca ngiflib.c cuando es llamada desde DecodeGifImg, porque el desentrelazado para imágenes pequeñas es manejado inapropiadamente.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H