CVE-2021-3548

Published: May 26, 2021Modified: Jun 17, 2026

7.1

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Exploitability: 1.8 / Impact: 5.2

Source: NVD

Description

A flaw was found in dmg2img through 20170502. dmg2img did not validate the size of the read buffer during memcpy() inside the main() function. This possibly leads to memory layout information leaking in the data. This might be used in a chain of vulnerability in order to reach code execution.

Affected (1)

Products: Dmg2img Project: Dmg2img

Dmg2img Project

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dmg2img Project Dmg2img	Up to 20170502

Related CWEs

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (2)

https://bugzilla.redhat.com/show_bug.cgi?id=1959585

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1959585

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

Timeline

No history available yet.