210 matches found
Code injection
An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS405, QCS605, SD 636, SD 665, SD 675...
CVE-2019-2281
An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in QCS405, QCS605, SD 636, SD 665, SD 675...
CVE-2019-2281
CVE-2019-2281 describes an unauthenticated bitmap image loading vulnerability that can lead to execution of unverified code in Qualcomm Snapdragon platforms. The incident is triggered by loading a bitmap into memory, potentially enabling local code execution with high impact (confidentiality, int...
ImageMagick Resource Management Error Vulnerability (CNVD-2019-29431)
ImageMagick is a set of open source image processing software from the American company ImageMagick Studio. The software can read, convert or write images in a variety of formats. A memory disclosure vulnerability exists in the 'ReadBMPImage' function in the coders/bmp.c file in ImageMagick Studi...
ALPINE-CVE-2019-13133
ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c...
CVE-2019-13133
ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c...
Memory Corruption Vulnerability in BMP Image Processing by Little Curry Viewer
Little Curry Look is an image viewing program. A memory corruption vulnerability exists in Little Curry Viewer's handling of BMP images. An attacker can exploit this vulnerability to cause the program to crash...
Memory Corruption Vulnerability in Cloud Pulse License Plate Recognition Software
Xiamen Cloud Pulse Technology Co., Ltd. was established in June 2002, Cloud Pulse Technology mainly develops cell phone photo text recognition, document recognition, bank card recognition, business card recognition, cell phone information network/PC synchronization and management technology. A...
DEBIAN-CVE-2018-18024
In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...
ImageMagick out-of-bounds write vulnerability (CNVD-2018-12317)
ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. An out-of-bounds write vulnerability exists in ReadBMPImage and WriteBMPImage in coders/bmp.c in ImageMagick 7.0.8-3 Q16. An attacker can cause an out-of-bounds write ...
UBUNTU-CVE-2018-12599
In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file...
libjpeg-turbo denial of service vulnerability (CNVD-2018-11844)
libjpeg is a C library that contains JPEG decoding and JPEG encoding functions. libjpeg-turbo is an optimized version of libjpeg. A security vulnerability exists in the 'allowsarray' function in the jmemmgr.c file in libjpeg-turbo version 1.5.90. An attacker can exploit this vulnerability to caus...
DEBIAN-CVE-2018-1152
libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image...
ALPINE-CVE-2018-1152
libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image...
ALPINE-CVE-2017-14442
An exploitable code execution vulnerability exists in the BMP image rendering functionality of SDL2image-2.0.2. A specially crafted BMP image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...
UBUNTU-CVE-2017-14442
An exploitable code execution vulnerability exists in the BMP image rendering functionality of SDL2image-2.0.2. A specially crafted BMP image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...
UBUNTU-CVE-2017-12122
An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2image-2.0.2. A specially crafted ILBM image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...
Extreme Office 2017 suffers from a buffer overflow vulnerability
Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Office 2017 V1.0.5.0 suffers from a buffer overflow vulnerability when processing BMP images. An attacker can exploit this vulnerability to cause the program to crash b...
PT-2018-5643 · Sdl +2 · Sdl2 Image +2
Name of the Vulnerable Software and Affected Versions: SDL2 image version 2.0.2 Description: A code execution issue exists in the BMP image rendering functionality. A specially crafted BMP image can cause a stack overflow, resulting in code execution. An attacker can trigger this issue by...