-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/strukturag/libheif | go | < 1.15.2 | 1.15.2 |
Miggo AIRoot Cause AnalysisThe core vulnerability exists in Fraction::round() where division by denominator occurs. The patch modifies Fraction constructor to prevent denominator reduction to zero, but the actual crash occurs in round() when using an invalid denominator. The ASAN trace shows round() at crash point, and Box_clap::bottom_rounded as the parent caller processing malicious image data. Both functions appear in runtime profiles during exploitation - round() for the fatal division, and bottom_rounded for processing attacker-controlled clap box values.
A Semantic Attack on Google Gemini - Read the Latest Research