Description
The iwbmp_read_info_header function in imagew-bmp.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.
References
- GLSA-201706-06 vendor-advisory
- 97496 vdb-entry
- https://github.com/jsummers/imageworsener/issues/8