GHSA-xgmm-3vvr-6c8j
Index out of bounds leading to crash
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | simonwaldherr.de/go/zplgfa | <= 1.1.1 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
ZPLGFA 1.1.1 allows attackers to cause a panic (because of an integer index out of range during a ConvertToGraphicField call) via an image of zero width. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequence
References
External links from the advisory. They lead to third-party sites.