Lucene search
HistoryAug 16, 2022 - 9:15 p.m.
CVE-2022-35007
cve
2022
35007
pngdec
heap buffer overflow
vulnerability
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
45.8%
PNGDec commit 8abf6be was discovered to contain a heap buffer overflow via __interceptor_fwrite.part.57 at sanitizer_common_interceptors.inc.
Affected configurations
Node
pngdec_projectpngdecMatch1.0.0
ORpngdec_projectpngdecMatch1.0.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| pngdec_project:pngdec | pngdec project pngdec | eq | 1.0.0 |
| pngdec_project:pngdec | pngdec project pngdec | eq | 1.0.1 |
References
Social References
More
Related
osv
osv
CVE-2022-35007
2022-08-16 21:15:10
cvelist
cvelist
CVE-2022-35007
2022-08-16 20:00:13
nvd
nvd
CVE-2022-35007
2022-08-16 21:15:10
prion
prion
Heap overflow
2022-08-16 21:15:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
45.8%
Related for CVE-2022-35007