Integer Overflow in Google Picasa Affects Image Processing
CVE-2015-8221

Currently unrated

Key Information:

Vendor
Google
Status
Vendor
CVE Published:
17 November 2015

Summary

An integer overflow vulnerability exists in Google Picasa prior to version 3.9.140 Build 259, which can be exploited by remote attackers. This flaw occurs in the processing of CAMF sections within FOVb images and can lead to a heap-based buffer overflow. Successful exploitation may allow attackers to execute arbitrary code on affected systems, potentially compromising user data and system integrity.

References

EPSS Score

24% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.