CVE-2022-44081 — Out-of-bounds Read in Lodepng

CWE-125 — Out-of-bounds Read3 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 85.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Lodev Lodepng
Timeline
PublishedOct 31
Latest updateNov 1

Description

Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages1 packages

▶NVDlodev/lodepng2022-07-17

🔴Vulnerability Details

2
GHSA
GHSA-3j83-m58c-vrr9: Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail↗2022-11-01
▶
OSV
CVE-2022-44081: Lodepng v20220717 was discovered to contain a segmentation fault via the function pngdetail↗2022-10-31
▶
CVE-2022-44081 — Out-of-bounds Read in Lodev Lodepng | cvebase