CVE-2017-12954 in libgig
Summary
The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted gig file.
Reservation
08/18/2017
Disclosure
08/28/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 105825 | libgig gig File gig.cpp GetSampleFromWavePool out-of-bounds | 125 | Proof-of-Concept | Not defined | CVE-2017-12954 |