New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Vulnerabilidade Infinite Loop #65

Open

vinisec opened this issue Mar 17, 2022 · 0 comments

Labels

vinisec commented Mar 17, 2022

Descreva a vulnerabilidade de segurança (se houver CVE, coloque como
referência)

CWE-400

JpegImagePlugin may append an EOF marker to the end of a truncated file, so that the last segment of the data will still be processed by the decoder.

If the EOF marker is not detected as such however, this could lead to an infinite loop where JpegImagePlugin keeps trying to end the file.

Classifique a prioridade de correção, de acordo com a severidade da
vulnerabilidade 90 dias

vinisec added the security label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment