CVE-2017-18235 PUBLISHED CVSS 4.300000190734863 MEDIUM

An issue was discovered in Exempi before 2.4.3. The VPXChunk class in XMPFiles/source/FormatSupport/WEBP_Support.cpp does not ensure nonzero widths and heights, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted .webp file.

EPSS 0.41% · 61.1th percentile

Risk Scores

CVSS v2.0
4.300000190734863
EPSS Score
0.41%
61.1th percentile

Affected Products

VendorProductVersions
exempi_projectexempi0
n/an/an/a

Timeline

References

Open in Interactive Console →