CVE-2017-8326

CVE-2017-8326 describes a vulnerability in libimageworsener.a of ImageWorsener versions prior to 1.3.1, stemming from "left shift cannot be represented in type int" undefined behavior issues. This flaw, found in imagew-bmp.c and imagew-util.c, could allow a remote attacker to trigger a denial of service (application crash) or potentially achieve other unspecified impacts through a specially crafted image. The vulnerability carries a high CVSS v3.0 score of 8.8, indicating a critical risk. It can be exploited over the network with low attack complexity, requiring user interaction (e.g., opening a malicious image), and has the potential for high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public awareness or attention.