CVE-2021-3548CWE-125

A flaw was found in dmg2img through 20170502

published May 26, 2021

CVSS
—
EPSS
1%
Percentile
61.2
In the wild
Unconfirmed
What it is

A flaw was found in dmg2img through 20170502. dmg2img did not validate the size of the read buffer during memcpy() inside the main() function. This possibly leads to memory layout information leaking in the data. This might be used in a chain of vulnerability in order to reach code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00961 · 61.2th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2021-05-26T20:32Z
EPSS history
Timeline
  • 26 MAY 20:32Z
    A flaw was found in dmg2img through 20170502
    cvelistv5