5.5
CVE-2023-36308
- EPSS 0.03%
- Veröffentlicht 05.09.2023 04:15:08
- Zuletzt bearbeitet 04.11.2025 18:15:40
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Logindisintegration Imaging 1.6.2 allows attackers to cause a panic (because of an integer index out of range during a Grayscale call) via a crafted TIFF file to the scan function of scanner.go. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequence
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Disintegration ≫ Imaging Version1.6.2 SwPlatformgo
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.03% | 0.057 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
|
CWE-129 Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.