Skip to content
OpenAdvisories

Package · Debian

libmng

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    libmng through 2.0.3 Heap Buffer Overflow via ORDR Chunk Reader mng_read_ordr

    libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mng_read_ordr() that allows attackers to corrupt heap memory because ORDR entry buffers are sized by 5-byte on-wire records instead of 8-byte in-memory entries. Attackers can supply a…