PT-2022-20939
CVE-2022-31796
·
تاريخ النشر
2022-05-29
·
تاريخ التحديث
2022-06-13
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
libjpeg version 1.63
Description
The issue is a heap-based buffer over-read in the HierarchicalBitmapRequester::FetchRegion function, located in hierarchicalbitmaprequester.cpp. This occurs because the MCU size can differ between allocation and use, leading to potential memory access issues.
Recommendations
For libjpeg version 1.63, consider applying a patch or fix that addresses the heap-based buffer over-read issue in the HierarchicalBitmapRequester::FetchRegion function. As a temporary workaround, restrict the use of the HierarchicalBitmapRequester::FetchRegion function until a patch is available.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾