CVE-2017-8326 libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might allow remote attackers to cause a denial of service (applicat...
HighCVSS 8.8
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image, related to imagew-bmp.c and imagew-util.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| entropymine imageworsener | <= 1.3.0 | No fix listed |
References
- blogs.gentoo.org patch third-party-advisory vdb-entry
- github.com issue-tracking patch third-party-advisory
- GLSA-201706-06 third-party-advisory vendor-advisory