CVE-2016-3993

State: Published
Severity: Not scored
Published: May 13, 2016
Updated: Aug 6, 2024
Reserved: Apr 10, 2016

Description

Off-by-one error in the __imlib_MergeUpdate function in lib/updates.c in imlib2 before 1.4.9 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted coordinates.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://git.enlightenment.org/legacy/imlib2.git/commit/?id=ce94edca1ccfbe314cb7cd9453433fad404ec7ef
[Enlightenment-announce] 20160501 imlib2 1.4.9mailing-list
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=819818
DSA-3555vendor-advisory
openSUSE-SU-2016:1330vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.