CVE-2021-44343

HIGH

Ok-file-formats - Buffer Overflow

Title source: rule
STIX 2.1

Description

David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurred in function ok_png_read_data() in "/ok_png.c".

References (1)

Core 1
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://github.com/brackeen/ok-file-formats/issues/18

Scores

CVSS v3 7.8
EPSS 0.0018
EPSS Percentile 39.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-120
Status published
Products (1)
ok-file-formats_project/ok-file-formats 2021-06-05
Published Mar 03, 2022
Tracked Since Feb 18, 2026