Medium · 6.5 CVE-2020-29242 CVE-2020-29243CVE-2020-29244CVE-2020-29245EUVD-2023-0683GHSA-27mh-3343-6hg5GHSA-9wm7-rc47-g56mGHSA-9xm8-8qvc-vw3pGHSA-wg79-2cgp-qrjmGO-2021-0097

dhowden tag panic due to out-of-bounds read

Published Dec 28, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Package: github.com/dhowden/tag Ecosystem: Go

Description

dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readPICFrame.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Go	github.com/dhowden/tag	< 0.0.0-20201120070457-d52dcb253c63	0.0.0-20201120070457-d52dcb253c63	GHSA-27mh-3343-6hg5

References

https://github.com/dhowden/tag/issues/77