CVE-2026-77622
HIGH 1 PoC
MEDIUM
Priority: 0.04
BB Relevance:
77/100
Published: 2026-11-05
Modified: 2026-11-12
First seen: 2026-11-05
Status: active
Attack Surface
Network
No Auth
No Interaction
CVSS Vector Breakdown
AV:
Network
AC:
High
PR:
None
UI:
None
S:
X
AT:
Present
VC:
None
VI:
None
VA:
High
Description
Sliver is a command and control framework. Prior to 1.7.6, an HTTP(S) listener using the PNG encoder accepts attacker-controlled PNG dimensions without an effective decoded-size or pixel limit in util/encoders/images.go, while the listener nonce space implemented in server/encoders/encoders.go is small enough to search remotely. An unauthenticated attacker who identifies a valid nonce can submit a highly compressed image to PNGEncoder.Decode, where it expands during png.Decode, exhausting server memory and causing a complete loss of availability. This vulnerability is fixed in 1.7.6.
Weakness Classification (1)
References & Advisories (3)
x_refsource_MISC
x_refsource_MISC
x_refsource_CONFIRM