oss-security - CVE Request: imlib2: integer overflow resulting in insufficient heap allocation

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20160414172353.GA5117@eldamar.local>
Date: Thu, 14 Apr 2016 19:23:53 +0200
From: Salvatore Bonaccorso <carnil@...ian.org>
To: OSS Security Mailinglist <oss-security@...ts.openwall.com>
Cc: CVE Assignments MITRE <cve-assign@...re.org>
Subject: CVE Request: imlib2: integer overflow resulting in insufficient heap
 allocation

Hi

Yuriy M. Kaminskiy discovered an integer overflow in imlib2, which
result in insufficient heap allocation. The upstream fix is in

https://git.enlightenment.org/legacy/imlib2.git/commit/?id=7eba2e4c8ac0e20838947f10f29d0efe1add8227

Can you assign a CVE for this issue?

Regards,
Salvatore

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.