CVE-2022-1325CWE-400

A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is possible to trick…

published August 31, 2022

CVSS
—
EPSS
0%
Percentile
35.1
In the wild
Unconfirmed
What it is

A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is possible to trick the application into allocating huge buffer sizes like 64 Gigabyte upon reading the file from disk or from a virtual buffer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00418 · 35.1th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2022-08-31T15:33Z
EPSS history
Timeline
  • 31 AUG 15:33Z
    A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is possible to trick…
    cvelistv5