-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability (CVE-2021-40812) description states that it's an out-of-bounds read due to the lack of return value checks for gdGetBuf and gdPutBuf. The provided commit 6f5136821be86e7068fcdf651ae9420b5d42e9a9 specifically addresses this issue by adding return value checks for gdPutBuf within the functions _gdImageBmpCtx in src/gd_bmp.c and _gdImageWebpCtx in src/gd_webp.c. Before this patch, these functions used gdPutBuf without verifying if the write operation was successful and complete. This omission could lead to situations where less data was written than expected, and subsequent reads from the affected buffer (assuming it was fully written) could go out of bounds. Therefore, these two functions are identified as vulnerable in their pre-patch state.