medium5.5
CVE-2023-36307
Index out of bounds leading to crash
Impact
ZPLGFA 1.1.1 allows attackers to cause a panic (because of an integer index out of range during a ConvertToGraphicField call) via an image of zero width. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequence
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | simonwaldherr.de/go/zplgfa | <= 1.1.1 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simonwaldherr | Zplgfa | Version 1.1.1 |