POJIA破甲
地图 / High memory usage for generating preview of broken image

High memory usage for generating preview of broken image

内存破坏 / Incorrect Calculation of Buffer Size / #1261225

厂商
Nextcloud
严重程度
低危 · CVSS 3.5
赏金
—
弱点
Incorrect Calculation of Buffer Size
研究员
@fancycode
披露日期
2022-03-09
资产
nextcloud/server
CVE
CVE-2022-24741

该报告还没有中文解读。

原文摘录

摘自原文(509 字符中的一小部分)
When the attached file is uploaded and a preview is generated (e.g. in the folder overview of the files app), the PHP process allocates a very large amount of memory (on my machine it was shortly around 5 GByte) and CPU.

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Nextcloud 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @fancycode · 版权归作者与 Nextcloud 所有

同类报告

size_t-to-int vulnerability in exFAT leads to memory corruption via malformed USB flash drivesPlayStation · 2022-09-21 · $10,000CVE-2019-5435: An integer overflow found in /lib/urlapi.ccurl · 2020-12-05Incorrect sizeof() in Rustls Backend Memory Allocationcurl · 2025-11-15Zip bombTor · 2023-11-28KILL authorization trusts the presented login name instead of the authenticated anonymous accountMariaDB · 2026-09-07first name and last name restrictions bypassLegal Robot · 2017-09-05
High memory usage for generating preview of broken image · 破甲 POJIA