CVE-2021-36530

2021-08-2716:15:07

Google

osv.dev

ngiflib heap overflow boundary ngiflib_no_file

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

61.5%

JSON

ngiflib 0.4 has a heap overflow in GetByteStr() at ngiflib.c:108 in NGIFLIB_NO_FILE mode, GetByteStr() copy memory buffer without checking the boundary.

References

github.com/miniupnp/ngiflib/issues/19