CVEs-PoC/2018/CVE-2018-8975.md

CVE-2018-8975

Description

The pm_mallocarray2 function in lib/util/mallocvar.c in Netpbm through 10.81.03 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file, as demonstrated by pbmmask.

POC

Reference

• https://github.com/xiaoqx/pocs/blob/master/netpbm
• https://github.com/xiaoqx/pocs/blob/master/netpbm

Github

• https://github.com/xiaoqx/pocs