TI-2017-02037 CVE-2017-2816 · GHSA-3w43-mhj6-r4fj
Memory corruption in LibOfx
Priority MEDIUM 43
An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11.
No Libofx Project vulnerabilities are listed in CISA KEV.
3 records in Libofx · all components
An exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0.9.11.
An issue was discovered in LibOFX 0.9.14.
ofx_proc_file in ofx_preproc.cpp in LibOFX 0.9.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file, as demonstrated by an ofxdump call.