Vulnerability Reportgcc:12

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker could trigger heap-buffer-overflow conditions such as CVE-2023-6879 and CVE-2023-45853, potentially causing crashes or data corruption when the final image processes untrusted AV1 video or ZIP files. The scan shows 2284 exposed findings, including 96 at severity 7.0 or higher and a max severity of 9.8, so these risks should be addressed in downstream images. Post-exploit-only findings are low severity and do not change the overall CAUTION rating. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.