CVE-2017-2575

2018-08-2221:00:00

CWE-119

redhat

www.cve.org

EPSS

0.001

Percentile

39.4%

JSON

A vulnerability was found while fuzzing libbpg 0.9.7. It is a NULL pointer dereference issue due to missing check of the return value of function malloc in the BPG encoder. This vulnerability appeared while converting a malicious JPEG file to BPG.

CNA Affected

[
  {
    "product": "libbpg",
    "vendor": "Fabrice Bellard",
    "versions": [
      {
        "status": "affected",
        "version": "0.9.7"
      }
    ]
  }
]

References

seclists.org/oss-sec/2017/q2/100

www.securityfocus.com/bid/97963

EPSS

0.001

Percentile

39.4%

JSON

Related for CVELIST:CVE-2017-2575