vendor:
mutool
by:
Ghostscript
7,5
CVSS
HIGH
Null Pointer Dereference
416
CWE
Product Name: mutool
Affected Version From: Git HEAD 8eea208e099614487e4bd7cc0d67d91489dae642
Affected Version To: Git HEAD 8eea208e099614487e4bd7cc0d67d91489dae642
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2020
POC to trigger null pointer dereference (mutool)
After some fuzz testing, a crashing test case was found in Git HEAD 8eea208e099614487e4bd7cc0d67d91489dae642. To reproduce, the command 'mutool convert -F cbz nullptr_fz_paint_pixmap_with_mask -o /dev/null' was used. AddressSanitizer reported a READ memory access on an unknown address 0x000000000020.
Mitigation:
Developers should ensure that all pointers are properly initialized and validated before use.