CVE-2016-8710 An exploitable heap write out of bounds vulnerability exists in the decoding of BPG images in Libbpg library. A crafted BPG image decoded by libbpg can cause an integer underflow vulnerability causing...
HighCVSS 7.8
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An exploitable heap write out of bounds vulnerability exists in the decoding of BPG images in Libbpg library. A crafted BPG image decoded by libbpg can cause an integer underflow vulnerability causing an out of bounds heap write leading to remote code execution. This vulnerability can be triggered via attempting to decode a crafted BPG image using Libbpg.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libbpg project libbpg | = 0.9.4 | No fix listed |
| libbpg project libbpg | = 0.9.7 | No fix listed |
| Libbpg | = 0.9.4 | No fix listed |
| Libbpg | = 0.9.7 | No fix listed |
References
- 95740 broken-link third-party-advisory vdb-entry
- www.talosintelligence.com exploit patch technical-description third-party-advisory vdb-entry
- Debian Security Tracker CVE-2016-8710 vendor-advisory