medium5.5
CVE-2020-25266
AppImage appimaged before 1.0.3 does not properly check whether a downloaded file is a valid appimage.
Impact
AppImage appimaged before 1.0.3 does not properly check whether a downloaded file is a valid appimage. For example, it will accept a crafted mp3 file that contains an appimage, and install it.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Appimage | Appimaged | before 1.0.3 |