VULNERABILITY INTELLIGENCE

CVE-2021-45972

CVSS score7.1 HIGH
EPSS probability0.99%
CISA KEVNot currently listed
Published2022-01-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Description

The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file determines the amount of data to write. This allows an attacker to overwrite up to 250 bytes outside of the allocated buffer with arbitrary data.

Weakness classification

  • nvd@nist.gov: CWE-1284

Primary references