CVE-2018-10972

Name of the Vulnerable Software and Affected Versions Free Lossless Image Format (FLIF) version 0.3

Description An issue in the TransformPaletteC::process function allows remote attackers to cause a denial of service or possibly have other impact via a crafted file. The function, located in transform/palette C.hpp, is vulnerable to a heap-based buffer overflow.

Recommendations For Free Lossless Image Format (FLIF) version 0.3, consider avoiding the use of the TransformPaletteC::process function until a patch is available. As a temporary workaround, restrict the processing of crafted files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.