PT-2020-22239

Name of the Vulnerable Software and Affected Versions spng affected versions not specified Description The issue is related to a heap-buffer-overflow read. Technical details about the crash include the spng decode image function. Recommendations At the moment, there is no information about a newe...

DEBIAN-CVE-2020-10994

In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file...

DEBIAN-CVE-2020-11538

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311...

PYSEC-2020-80

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311...

PYSEC-2020-76

Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c...

UBUNTU-CVE-2020-10994

In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file...

PT-2020-12049 · Python Imaging Library +2 · Pillow +2

Name of the Vulnerable Software and Affected Versions: Pillow versions prior to 7.1.0 Pillow versions 7.x prior to 7.0.1 Pillow version 6.2.3 and earlier Description: The issue involves two Buffer Overflows in libImaging/TiffDecode.c. This affects Pillow, where the buffer overflows can occur due ...

PT-2020-12478 · Pillow +2 · Pillow +2

Name of the Vulnerable Software and Affected Versions: Pillow versions prior to 7.1.0 Description: The issue is related to multiple out-of-bounds reads that can occur via a crafted JP2 file in the libImaging/Jpeg2KDecode.c module. Recommendations: For Pillow versions prior to 7.1.0, update to...

PT-2020-12675 · Pillow +5 · Pillow +5

Name of the Vulnerable Software and Affected Versions: Pillow versions prior to 7.0.1 Description: The issue exists in the parsing of SGI image files, where a number of out-of-bounds reads are present in the libImaging/SgiRleDecode.c module. Recommendations: For versions prior to 7.0.1, update to...

PT-2020-22345

Name of the Vulnerable Software and Affected Versions Wavpack affected versions not specified Description The issue is related to a crash type of UNKNOWN READ. Technical details about the crash include the functions decode fast, unpack dsd samples, and WavpackUnpackSamples. Recommendations At the...

PT-2020-22431

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read error. Technical details include the involvement of specific functions: tvb get ipv4 addr with prefix...

PT-2020-22246

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A heap-buffer-overflow read issue is reported, with a crash type indicating a Heap-buffer-overflow READ 1. The crash state involves functions such as read...

PT-2020-21698

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions jbig2 image get pixel fast, jbig2 decode generic template0 TPGDON,...

PT-2020-22051

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions jbig2 image get pixels fast, jbig2 decode generic template0 TPGDON,...

PT-2020-21869

Name of the Vulnerable Software and Affected Versions parquet affected versions not specified Description The issue is related to a heap-use-after-free error, specifically a WRITE 2 crash type. It occurs in the GetBatch function of arrow::BitUtil::BitReader, which is used by...

PT-2020-22642

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the jbig2 arith decode function, which is called by jbig2...

PT-2020-22057

Name of the Vulnerable Software and Affected Versions spng affected versions not specified Description The issue is related to a heap buffer overflow, specifically a WRITE 2 crash type. The crash occurs in the spng decode scanline, spng decode row, and spng decode image functions. Recommendations...

ffmpeg:ffmpeg_AV_CODEC_ID_APNG_fuzzer: Heap-buffer-overflow in inflate

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4796622520451072 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDAPNGfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

LibVNCServer Buffer Overflow Vulnerability (CNVD-2020-36781)

LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in programs. A security vulnerability exists in the 'hybiReadAndDecode' function in the libvncserver/wsdecode.c file in versions of LibVNCServer prior to...

Multi-stage APT attack drops Cobalt Strike using Malleable C2 feature

This blog post was authored by Hossein Jazi and Jérôme Segura On June 10, we found a malicious Word document disguised as a resume that uses template injection to drop a .Net Loader. This is the first part of a multi-stage attack that we believe is associated to an APT attack. In the last stage,...