CVE-2023-39125

NTSC-CRT 2.2.1 has an integer overflow and out-of-bounds write in loadBMP in bmp_rw.c because a file's width, height, and BPP are not validated

published August 17, 2023

CVSS
—
EPSS
1%
Percentile
53.8
In the wild
Unconfirmed
What it is

NTSC-CRT 2.2.1 has an integer overflow and out-of-bounds write in loadBMP in bmp_rw.c because a file's width, height, and BPP are not validated. NOTE: the vendor's perspective is "this main application was not intended to be a well tested program, it's just something to demonstrate it works and for the user to see how to integrate it into their own programs."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00732 · 53.8th percentile
Published
2023-08-17T00:00Z
EPSS history
Timeline
  • 17 AUG 00:00Z
    NTSC-CRT 2.2.1 has an integer overflow and out-of-bounds write in loadBMP in bmp_rw.c because a file's width, height, and BPP are not validated
    cvelistv5