CVE-2019-13655

Imgix through 2019-06-19 allows remote attackers to cause a denial of service (resource consumption) by manipulating a small JPEG file to specify dimensions of…

published July 29, 2019

CVSS
—
EPSS
1%
Percentile
71.6
In the wild
Unconfirmed
What it is

Imgix through 2019-06-19 allows remote attackers to cause a denial of service (resource consumption) by manipulating a small JPEG file to specify dimensions of 64250x64250 pixels, which is mishandled during an attempt to load the 'whole image' into memory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01367 · 71.6th percentile
Published
2019-07-29T18:43Z
EPSS history
Timeline
  • 29 JUL 18:43Z
    Imgix through 2019-06-19 allows remote attackers to cause a denial of service (resource consumption) by manipulating a small JPEG file to specify dimensions of…
    cvelistv5