Vendors / Gegl Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 6 CVSS 7.0–8.9
Exploited now Gegl records in CISA KEV No Gegl vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 47
Multiple integer overflows in operations/external/ppm-load.c in GEGL (Generic Graphics Library) 0.2.0 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a large…
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.1326 · Published 2012-11-18 · Fixed CWE-189
Priority MEDIUM 42
An issue was discovered in GEGL through 0.3.32.
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.01892 · Published 2018-04-14 · Will not fix CWE-119
Priority MEDIUM 41
An issue was discovered in GEGL through 0.3.32.
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.01441 · Published 2018-04-14 · Will not fix CWE-119
Priority LOW 37
load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or filtered.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01548 · Published 2021-12-23 · Partial fix
Priority LOW 36
An issue was discovered in GEGL through 0.3.32.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01322 · Published 2018-04-14 · No fix listed CWE-119
Open these records in search → All records by CVSS severity
Critical1 High6 Medium0 Low0 No CVSS0