CVE-2018-10717 | BDVDB-2026-100360 Detail

Description#

The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 does not consider the bounds of the pixels data structure, which allows remote attackers to cause a denial of service (WritePixels heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted GIF file, a different vulnerability than CVE-2018-10677.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/miniupnp/ngiflib/issues/3
https://github.com/miniupnp/ngiflib/commit/cf429e0a2fe26b5f01ce0c8e9b79432e94509b6e

Exploit#

No public exploit known

History#

Version 12018-05-03Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.