CVE-2023-36308

disintegration Imaging 1.6.2 allows attackers to cause a panic (because of an integer index out of range during a Grayscale call) via a crafted TIFF file to…

published September 5, 2023

CVSS
—
EPSS
0%
Percentile
31.3
In the wild
Unconfirmed
What it is

disintegration Imaging 1.6.2 allows attackers to cause a panic (because of an integer index out of range during a Grayscale call) via a crafted TIFF file to the scan function of scanner.go. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequence

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00385 · 31.3th percentile
Published
2023-09-05T00:00Z
EPSS history
Timeline
  • 05 SEP 00:00Z
    disintegration Imaging 1.6.2 allows attackers to cause a panic (because of an integer index out of range during a Grayscale call) via a crafted TIFF file to…
    cvelistv5