In WooCommerce version prior to 3.3.1, there were no constraints to prevent negative or non-integer image sizes from being processed as-is, which could result in unpredictable behavior, buffer overflows, or even command injection. This fix uses absint to ensure that all image sizes are positive integers.
This vulnerability affects the following application versions:
- WooCommerce 3.3.0
- WooCommerce 3.3.0-rc.2