CVE-2017-8326

HIGH

Entropymine Imageworsener < 1.3.0 - Denial of Service

Title source: rule
STIX 2.1

Description

libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image, related to imagew-bmp.c and imagew-util.c.

References (3)

Scores

CVSS v3 8.8
EPSS 0.0089
EPSS Percentile 75.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-682
Status published
Products (1)
entropymine/imageworsener < 1.3.0
Published Apr 29, 2017
Tracked Since Feb 18, 2026