CVE-2021-36530

2021-08-2715:25:19

mitre

www.cve.org

ngiflib heap overflow boundary ngiflib_no_file getbytestr memory buffer security vulnerability

AI Score

9.2

Confidence

High

EPSS

0.002

Percentile

61.5%

JSON

ngiflib 0.4 has a heap overflow in GetByteStr() at ngiflib.c:108 in NGIFLIB_NO_FILE mode, GetByteStr() copy memory buffer without checking the boundary.

References

github.com/miniupnp/ngiflib/issues/19