Amazon Linux 2 : optipng (ALAS-2019-1313)

The bmpreadrows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service invalid memory write and crash via a series of delta escapes in a crafted BMP image.CVE-2016-2191 C Tenable Network Security, Inc. The descriptive text and package checks i...

Medium: optipng

Issue Overview: The bmpreadrows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service invalid memory write and crash via a series of delta escapes in a crafted BMP image.CVE-2016-2191 Affected Packages: optipng Note: This advisory is applicab...

Fedora 31 : SDL (2019-f5558abfef)

This release fixes a heap buffer over-read in BlitNtoN function when processing an invalid BMP image. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much...

Fedora 30 : SDL (2019-446ca9f695)

This release fixes a heap buffer over-read in BlitNtoN function when processing an invalid BMP image. It also updates a URL in the RPM metadata. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted t...

Fedora 29 : SDL (2019-e08f78d4a6)

This release fixes a heap buffer over-read in BlitNtoN function when processing an invalid BMP image. It also updates a URL in the RPM metadata. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted t...

MGASA-2019-0239 Updated sdl2 packages fix security vulnerabilities

Updated sdl2 packages fix security vulnerabilities This release fixes various buffer overflows when parsing or processing damaged Waveform audio and BMP image files. - Fix CVE-2019-7572 a buffer overread in IMAADPCMnibble rhbz1676754 - Fix CVE-2019-7572 a buffer overwrite in IMAADPCMnibble...

CVE-2019-13616

A heap-based buffer overflow was discovered in SDL in the SDLBlitCopy function, that was called while copying an existing surface into a new optimized one, due to lack of validation while loading a BMP image in the SDLLoadBMPRW function. An application that uses SDL to parse untrusted input files...

CVE-2019-13568

CImg through 2.6.7 has a heap-based buffer overflow in loadbmp in CImg.h because of erroneous memory allocation for a malformed BMP image...

CVE-2019-13568

CImg through 2.6.7 has a heap-based buffer overflow in loadbmp in CImg.h because of erroneous memory allocation for a malformed BMP image...

Heap overflow

CImg through 2.6.7 has a heap-based buffer overflow in loadbmp in CImg.h because of erroneous memory allocation for a malformed BMP image...

CVE-2019-13568

CImg through 2.6.7 has a heap-based buffer overflow in loadbmp in CImg.h because of erroneous memory allocation for a malformed BMP image...

CVE-2019-13568

CImg through 2.6.7 has a heap-based buffer overflow in loadbmp in CImg.h because of erroneous memory allocation for a malformed BMP image...

Security update for libjpeg-turbo (moderate)

openSUSE Security Update: Security update for libjpeg-turbo Announcement ID: openSUSE-SU-2019:1343-1 Rating: moderate References: 1096209 1098155 1128712 Cross-References: CVE-2018-1152 CVE-2018-11813 CVE-2018-14498 Affected Products: openSUSE Leap 42.3 An update that fixes three vulnerabilities ...

Denial Of Service (DoS) Through Divide By Zero

JasPer is vulnerable to denial of service attacks. A remote attacker could cause an application crash via a crafted YRsiz value in a BMP image to the imginfo command. Affected by this vulnerability is the function jpcdecprocesssiz of the file libjasper/jpc/jpcdec.c of the component imginfo...

NULL Pointer Dereference

JasPer is vulnerable to NULL pointer dereference. A remote attacker could cause denial of service via a crafted BMP image in an imginfo command. This issue affects the function bmpgetdata of the file libjasper/bmp/bmpdec.c of the component imginfo...

Denial Of Service (DoS) Through Divide By Zero

JasPer is vulnerable to denial of service attacks. A remote attacker could cause an application crash via a crafted XRsiz value in a BMP image to the imginfo command. Affected is the function jpcdecprocesssiz of the file libjasper/jpc/jpcdec.c of the component imginfo...

Double-Free Vulnerability

JasPer is vulnerable to double free vulnerability. A remote attacker could cause an application crash or possibly execute arbitrary code via a crafted BMP image to the imginfo command. Affected by this issue is the function memclose of the file jasstream.c of the component imginfo...

Integer Overflow

libtiff is vulnerable to Integer overflow attacks. Remote attackers could exploit this flaw to cause a crash or a possible arbitrary code execution via an crafted BMP image.This may trigger out-of-bound reads and denial of service DoS...

MGASA-2019-0127 Updated SDL12 packages fix security vulnerability

This release fixes various buffer overflows when parsing or processing damaged Waveform audio and BMP image files. - Fix CVE-2019-7577 a buffer overread in MSADPCMdecode rhbz1676510 - Fix CVE-2019-7575 a buffer overwrite in MSADPCMdecode rhbz1676744 - Fix CVE-2019-7574 a buffer overread in...

Updated SDL12 packages fix security vulnerability

This release fixes various buffer overflows when parsing or processing damaged Waveform audio and BMP image files. - Fix CVE-2019-7577 a buffer overread in MSADPCMdecode rhbz1676510 - Fix CVE-2019-7575 a buffer overwrite in MSADPCMdecode rhbz1676744 - Fix CVE-2019-7574 a buffer overread in...