CVE-2018-10972

2018-05-1015:00:00

mitre

www.cve.org

AI Score

8.1

Confidence

High

EPSS

0.003

Percentile

72.0%

JSON

An issue was discovered in Free Lossless Image Format (FLIF) 0.3. The TransformPaletteC::process function in transform/palette_C.hpp allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted file.

References

github.com/FLIF-hub/FLIF/issues/503