Total vulnerabilities in the database
file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.
| Software | From | Fixed in |
|---|---|---|
| christos_zoulas / file | - | 5.10.x |
| tim_robbins / libmagic | - | - |