CVE-2017-14232

The read_chunk function in flif-dec.cpp in Free Lossless Image Format (FLIF) 0.3 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted flif file.

Score

CVSS 3.0 5.5 Medium

Status

Modified - cve@mitre.org

Published

2019-08-15

Last modified

2024-08-05

Weaknesses

CWE-399

Affected products

• Flif (Flif)
• Jasper (Jasper Project)

References

• https://cxsecurity.com/cveshow/CVE-2017-14232
• https://www.oracle.com/security-alerts/cpuapr2020.html