CVE-2018-18581

An issue has been found in LuPng through 2017-03-10. It is a heap-based buffer over-read in internalPrintf in miniz/lupng.c.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2018-10-22

Last modified

2024-08-05

Weaknesses

CWE-125

Affected products

• Lupng (Lupng Project)

References

• https://github.com/grandnew/software-vulnerabilities/tree/master/LuPng#heap-buffer-overflow-in-function-internalprintf
• https://github.com/jansol/LuPng/issues/7