← Back

Dmg2img Project

dmg2img_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Dmg2img
dmg2img
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-32614
1Dmg2img Project
1Dmg2img
Jun 17, 2026
May 26, 2021
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
A flaw was found in dmg2img through 20170502. fill_mishblk() does not check the length of the read buffer, and copy 0xCC bytes from it. The length of the buffer is controlled by an attacker. By providing a length smaller...Show more
A flaw was found in dmg2img through 20170502. fill_mishblk() does not check the length of the read buffer, and copy 0xCC bytes from it. The length of the buffer is controlled by an attacker. By providing a length smaller than 0xCC, memcpy reaches out of the malloc'ed bound. This possibly leads to memory layout information leaking in the data. This might be used in a chain of vulnerability in order to reach code execution.Show less
CVE-2021-3548
1Dmg2img Project
1Dmg2img
Jun 17, 2026
May 26, 2021
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
A flaw was found in dmg2img through 20170502. dmg2img did not validate the size of the read buffer during memcpy() inside the main() function. This possibly leads to memory layout information leaking in the data. This mi...Show more
A flaw was found in dmg2img through 20170502. dmg2img did not validate the size of the read buffer during memcpy() inside the main() function. This possibly leads to memory layout information leaking in the data. This might be used in a chain of vulnerability in order to reach code execution.Show less