Infinite Loop Vulnerability in ngiflib Library by MiniUPnP
CVE-2023-37748

5.5MEDIUM

Key Information:

Vendor: Miniupnp Project
Status: Ngiflib
Vendor: CVE Published:; 19 July 2023

🔔 Create Miniupnp Project Vulnerability Alert

What is CVE-2023-37748?

A vulnerability exists in the ngiflib library due to an infinite loop triggered in the DecodeGifImg function located in ngiflib.c. This issue can lead to program hang-ups or crashes, disrupting service and potentially exposing systems to associated risks.

References

https://github.com/miniupnp/ngiflib/issues/25

https://github.com/miniupnp/ngiflib/

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 19, 2023
Vulnerability Reserved
Jul 10, 2023

CVE-2023-37748 Data

JSON