In short
- CVE-2023-36307 is a MEDIUM (CVSS 5.5) vulnerability affecting simonwaldherr.de/go/zplgfa, zplgfa (simonwaldherr).
- Chance of exploitation in the next 30 days (EPSS): 0.26%, higher than 18.1% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
ZPLGFA 1.1.1 allows attackers to cause a panic (because of an integer index out of range during a ConvertToGraphicField call) via an image of zero width. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequence
NVD description
ZPLGFA 1.1.1 allows attackers to cause a panic (because of an integer index out of range during a ConvertToGraphicField call) via an image of zero width. NOTE: it is unclear whether there are common use cases in which this panic could have any security consequence
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free