Skip to content
Snippets Groups Projects
Commit 7916869d authored by Yair Mizrahi's avatar Yair Mizrahi Committed by Alan Coopersmith
Browse files

CVE-2023-43787: Integer overflow in XCreateImage() leading to a heap overflow


When the format is `Pixmap` it calculates the size of the image data as:
    ROUNDUP((bits_per_pixel * width), image->bitmap_pad);
There is no validation on the `width` of the image, and so this
calculation exceeds the capacity of a 4-byte integer, causing an overflow.

Signed-off-by: default avatarAlan Coopersmith <alan.coopersmith@oracle.com>
parent b4031fc0
No related branches found
No related tags found
Loading
Checking pipeline status
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment