CVE-2017-14734 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Project Libbpg

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer2 documents2 sources
Severity
8.8HIGHNVD
EPSS
1.7%
top 17.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Libbpg Project Libbpg
Timeline
PublishedSep 25
Latest updateMay 17

Description

The build_msps function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted BPG file, related to hevc_decode_init1.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

1
GHSA
GHSA-9qq8-48hc-4qg5: The build_msps function in libbpg↗2022-05-17
▶