CVE-2017-8326

libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image, related to imagew-bmp.c and imagew-util.c.

• CWE-682

• https://blogs.gentoo.org/ago/2017/04/27/imageworsener-two-left-shift/Patch, Third Party Advisory, VDB Entry
• https://github.com/jsummers/imageworsener/commit/a00183107d4b84bc8a714290e824ca9c68dac738Issue Tracking, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/201706-06Third Party Advisory
• https://blogs.gentoo.org/ago/2017/04/27/imageworsener-two-left-shift/Patch, Third Party Advisory, VDB Entry
• https://github.com/jsummers/imageworsener/commit/a00183107d4b84bc8a714290e824ca9c68dac738Issue Tracking, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/201706-06Third Party Advisory

Published

Apr 29, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-8312Heap out-of-bound read in ParseJSS in VideoLAN VLC due to mi…
• CVE-2017-8313Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.…
• CVE-2017-8314Directory Traversal in Zip Extraction built-in function in K…
• CVE-2017-8315Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and…
• CVE-2017-8316IntelliJ IDEA XML parser was found vulnerable to XML Externa…
• CVE-2017-8325The iw_process_cols_to_intermediate function in imagew-main.…
• CVE-2017-8327The bmpr_read_uncompressed function in imagew-bmp.c in libim…
• CVE-2017-8328An issue was discovered on Securifi Almond, Almond+, and Alm…
• CVE-2017-8329An issue was discovered on Securifi Almond, Almond+, and Alm…
• CVE-2017-8330An issue was discovered on Securifi Almond, Almond+, and Alm…
• CVE-2017-8331An issue was discovered on Securifi Almond, Almond+, and Alm…
• CVE-2017-8332An issue was discovered on Securifi Almond, Almond+, and Alm…