LibRaw 'LibRaw::xtrans_interpolate()' function denial of service vulnerability

LibRaw is a C++ library developed by the LibRaw team for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A security vulnerability exists in the 'LibRaw::xtransinterpolate' function in the internal/dcrawcommon.cpp file in LibRaw versions prior to 0.18.6. A remote attacker can explo...

DEBIAN-CVE-2017-16910

An error within the "LibRaw::xtransinterpolate" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.6 can be exploited to cause an invalid read memory access and subsequently a Denial of Service condition...

PT-2017-18083

Name of the Vulnerable Software and Affected Versions Credhub-release version 1.1.0 Description The issue allows authenticated applications to bypass access control lists ACLs and view any credential within the CredHub installation when using the CredHub interpolate endpoint. Recommendations For...

PT-2017-4214

Name of the Vulnerable Software and Affected Versions LibRaw versions prior to 0.18.6 Description The issue is related to a buffer data boundary read in the internal/dcraw common.cpp component of the LibRaw image processing library. It allows a remote attacker to cause a Denial of Service conditi...

LibRaw Buffer Overflow Vulnerability (CNVD-2017-33276)

LibRaw is a C++ library developed by the LibRaw team for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A xtransinterpolate stack buffer overflow vulnerability in the internal/dcrawcommon.cpp file in versions of LibRaw prior to 0.18.3. A remote attacker can exploit this...

ALPINE-CVE-2017-14265

A Stack-based Buffer Overflow was discovered in xtransinterpolate in internal/dcrawcommon.cpp in LibRaw before 0.18.3. It could allow a remote denial of service or code execution attack...

PT-2017-4291

Name of the Vulnerable Software and Affected Versions: LibRaw versions prior to 0.18.3 Description: A Stack-based Buffer Overflow was discovered in the xtrans interpolate function in internal/dcraw common.cpp. This issue could allow a remote attacker to execute code or cause a denial of service...

Potrace 'interpolate_cubic' function out-of-bounds read vulnerability

Potrace is a set of bitmap image processing tools developed by software developer Peter Selinger. The tool provides the ability to add smoothing effects, free scaling of images and other features. An out-of-bounds read vulnerability exists in the 'interpolatecubic' function of the mkbitmap.c file...

UBUNTU-CVE-2017-12067

Potrace 1.14 has a heap-based buffer over-read in the interpolatecubic function in mkbitmap.c...

CVE-2017-12067

Potrace 1.14 has a heap-based buffer over-read in the interpolatecubic function in mkbitmap.c...

DEBIAN-CVE-2017-12067

Potrace 1.14 has a heap-based buffer over-read in the interpolatecubic function in mkbitmap.c...

PT-2017-12332

Name of the Vulnerable Software and Affected Versions Potrace version 1.14 Description The issue is related to a heap-based buffer over-read in the interpolate cubic function, located in the mkbitmap.c file. Recommendations For Potrace version 1.14, at the moment, there is no information about a...

CVE-2017-8038: Credentials readable from CredHub endpoint | Cloud Foundry

Severity High Vendor Cloud Foundry Foundation Versions Affected Credhub-release version 1.1.0 only Description CredHub access control lists ACLs enforce whether an authenticated user can perform an operation on a credential. For installations using ACLs, the ACL was bypassed for the CredHub...

Memory corruption

The 1 AddWeightedPathSegLists and 2 SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lack status checking, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a...

CVE-2015-7199: Improper Restriction of Operations within the Bounds of a Memory Buffer

The 1 AddWeightedPathSegLists and 2 SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lack status checking, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a...

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-131)

The 1 AddWeightedPathSegLists and 2 SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lack status checking, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a...

UBUNTU-CVE-2015-7199

The 1 AddWeightedPathSegLists and 2 SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lack status checking, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a...

PT-2015-2616

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 42.0 Firefox ESR versions prior to 38.4 Description The issue is related to the lack of status checking in the AddWeightedPathSegLists and SVGPathSegListSMILType::Interpolate functions, which can be exploited ...