CVE-2018-8975

The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a denial of service (heap-based buffer…

published March 25, 2018

CVSS
—
EPSS
2%
Percentile
76.3
In the wild
Unconfirmed
What it is

The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file, as demonstrated by pbmmask.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01659 · 76.3th percentile
Published
2018-03-25T03:00Z
EPSS history
Timeline
  • 25 MAR 03:00Z
    The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a denial of service (heap-based buffer…
    cvelistv5