Information Disclosure Vulnerability in Cimg Library by cimg.eu
CVE-2023-41484

8.1HIGH

Key Information:

Vendor

Cimg

Status
Cimg
Vendor
CVE Published:
20 September 2023

What is CVE-2023-41484?

A vulnerability in Cimg Library v2.9.3 allows attackers to exploit crafted JPEG files to gain access to sensitive information. This flaw highlights the potential risks associated with image processing libraries and emphasizes the necessity for robust validation mechanisms to prevent unauthorized information access.

References

https://github.com/eddieantonio/imgcat/issues/49

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.