EUVD-2026-103337

FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZEMAX - 3 to StreamZero for sub-byte images. A malicious RDP clipboard peer can return a crafted 1-bpp BMP processed by clipboardsynthesizeimageformattobmp for...

CVE-2026-111881

The FreeRDP software versions 3.14.1 through 3.31.x are vulnerable to an integer underflow in the WinPR BMP writer . The issue occurs when a mismatched stride calculation passes SIZE_MAX - 3 to Stream_Zero during the processing of sub-byte images. A malicious RDP clipboard peer can trigger this b...

CVE-2013-2729

Adobe Reader BMP/RLE heap corruption - CVE-2013-2729 Adobe Reader X is a powerful software solution developed by Adobe Systems to view, create, manipulate, print and manage files in Portable Document Format PDF. Since version 10 it includes the Protected Mode, a sandbox technology similar to the...

LogoFail-PoC

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ BIOS Image Parser...

CVE-2026-101952

An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP ISO-VPN peer to cause an rpd crash by sending a specific ISO-VPN update which is then processed by BMP route monitoring or...

EUVD-2026-101493

An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP ISO-VPN peer to cause an rpd crash by sending a specific ISO-VPN update which is then processed by BMP route monitoring or...

CVE-2026-101952

A vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP ISO-VPN peer to trigger an rpd crash . This occurs when the peer sends a specific ISO-VPN update that is subsequently processed by BMP route monitoring or NSR . No inform...

CVE-2026-101952 Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled

An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP ISO-VPN peer to cause an rpd crash by sending a specific ISO-VPN update which is then processed by BMP route monitoring or...

CVE-2026-33796

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP neighbor to execute arbitrary commands with root privileges via BMP route monitoring...

EUVD-2026-101404

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP neighbor to execute arbitrary commands with root privileges via BMP route monitoring...

CVE-2026-33796

Juniper Networks Junos OS and Junos OS Evolved are affected by a Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) . This flaw allows a configured external BGP neighbor to execute arbitrary commands with root privileges when BMP route monitoring is active. No specific...

CVE-2026-33796 Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP neighbor to execute arbitrary commands with root privileges via BMP route monitoring...

CVE-2026-100231

The GStreamer multimedia framework contains a heap out-of-bounds write vulnerability in the asfmux plugin. The root cause is an incorrect buffer size calculation when processing string metadata tags containing Unicode characters outside the Basic Multilingual Plane (such as emojis); the plugin in...

PT-2026-114197

🚨 CVE-2026-33796 A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP neighbor to execute arbitrary commands with root privileges via BMP route monitoring. 🎖@cveNotify...

CVE-2013-3664_BMP

Sketchup BMP Material RLE4 Heap Overflow - CVE-2013-3664 SketchUp fails to validate the input when parsing an embedded BMP RLE4 compressed texture. Arbitrary code execution is proved possible after a malicious texture or thumbnail or background image triggers a heap overflow. The issue can also b...

CVE-2019-8014

CVE-2019-8014 的一点简单分析。 包含 Poc 和 exp Shellcode 是弹出计算器 or CMD 窗口，不记得了。 注意： my.7z 是触发漏洞需要的 bmp 图片 ，文件太大了，我压缩了一下。...

zsteg

zsteg Descrizione rileva dati nascosti tramite steganografia in PNG e BMP Installazione gem install zsteg Rileva: Steganografia LSB in PNG e BMP Dati compressi con zlib OpenStego Camouflage 1.2.1 LSB con il set di Eratostene Utilizzo zsteg -h Usage: zsteg options filename.png paramstring -a, --al...

Astra Linux – Vulnerability in imagemagick

A flaw was discovered in ImageMagick, specifically in the code file coders/bmp.c. An attacker who submits a crafted file processed by ImageMagick could trigger undefined behavior, resulting in values that are outside the range of the type unsigned int. This likely leads to a disruption in the...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.0, the gdisurfacebits function processed SURFACEBITSCOMMAND messages sent by the RDP server. When these commands were processed using NSCodec, the bmp.width and bmp.height values provided by the server were not...

Rocky Linux 10.1 [CIQ] Security Update: fontforge / fontforge-debuginfo / fontforge-debugsource Multiple Vulnerabilities (crlsa-2026_2230)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20262230 advisory. fontforge: FontForge: Remote Code Execution via heap-based buffer overflow in BMP file parsing CVE-2025-15279 fontforge: FontForge: Remote Code Executio...