CVE-2017-8326

HIGH

Entropymine Imageworsener < 1.3.0 - Denial of Service

Title source: rule

Description

libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image, related to imagew-bmp.c and imagew-util.c.

References (3)

Scores

CVSS v3 8.8
EPSS 0.0089
EPSS Percentile 75.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE
CWE-682
Status draft

Affected Products (1)

entropymine/imageworsener < 1.3.0

Timeline

Published Apr 29, 2017
Tracked Since Feb 18, 2026