What’s Vulnerable › Vulnerabilities

CVE-2021-46389

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-02-07 · updated 2026-06-17
• Weakness: CWE-190

Description

IIPImage High Resolution Streaming Image Server prior to commit 882925b295a80ec992063deffc2a3b0d803c3195 is affected by an integer overflow in iipsrv.fcgi through malformed HTTP query parameters.

Affected products

• High Resolution Streaming Image Server Project High Resolution Streaming Image Server: before 2022-01-14 — fixed in 2022-01-14

How to fix

Upgrade to a fixed version: High Resolution Streaming Image Server Project High Resolution Streaming Image Server 2022-01-14. Check the vendor advisory for mitigations.

References

• https://github.com/ruven/iipsrv/commit/4ed59265fbbd636dc2fbbf325f8ea37ed300a6d9
• https://github.com/ruven/iipsrv/commit/882925b295a80ec992063deffc2a3b0d803c3195
• https://github.com/ruven/iipsrv/commit/4ed59265fbbd636dc2fbbf325f8ea37ed300a6d9
• https://github.com/ruven/iipsrv/commit/882925b295a80ec992063deffc2a3b0d803c3195

Get alerted when CVE-2021-46389 or the next vulnerability affects your stack