GHSA-xgmm-3vvr-6c8jMediumCVSS 5.5

Index out of bounds leading to crash

Published
September 5, 2023
Last Modified
March 21, 2024

🔗 CVE IDs covered (1)

CVE-2023-36307 →

📋 Description

ZPLGFA 1.1.1 allows attackers to cause a panic (because of an integer index out of range during a ConvertToGraphicField call) via an image of zero width. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequence

🎯 Affected products1

  • go/simonwaldherr.de/go/zplgfa:<= 1.1.1

🔗 References (4)