Lucene search
+L

2883 matches found

OSV
OSV
added 2025/08/25 3:15 p.m.9 views

UBUNTU-CVE-2025-52930

A memory corruption vulnerability exists in the BMPv3 RLE Decoding functionality of the SAIL Image Decoding Library v0.9.8. When decompressing the image data from a specially crafted .bmp file, a heap-based buffer overflow can occur which allows for remote code execution. An attacker will need to...

8.8CVSS6.3AI score0.00933EPSS
SaveExploits1References3
Snyk
Snyk
added 2025/08/25 2:41 p.m.10 views

Integer Overflow to Buffer Overflow

Overview Affected versions of this package are vulnerable to Integer Overflow to Buffer Overflow via the BMPv3 Palette Decoding functionality. An attacker can execute arbitrary code by tricking a user into opening a specially crafted .bmp file, which triggers an integer overflow and subsequent...

8.8CVSS7.9AI score0.00664EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/08/25 2:41 p.m.6 views

Integer Overflow to Buffer Overflow

Overview Affected versions of this package are vulnerable to Integer Overflow to Buffer Overflow via the BMPv3 image decoding functionality. An attacker can execute arbitrary code by supplying a specially crafted .bmp file that triggers an integer overflow during stride calculation, leading to a...

8.8CVSS7.9AI score0.00859EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/08/25 2:41 p.m.8 views

Integer Overflow to Buffer Overflow

Overview Affected versions of this package are vulnerable to Integer Overflow to Buffer Overflow via the BMPv3 RLE Decoding functionality. An attacker can execute arbitrary code or cause a denial of service by supplying a specially crafted .bmp file that triggers a heap-based buffer overflow duri...

8.8CVSS7.8AI score0.00933EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/08/25 2:17 p.m.26 views

CVE-2025-46407

A memory corruption vulnerability exists in the BMPv3 Palette Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .bmp file, an integer overflow can be made to occur which will cause a heap-based buffer to overflow when reading the palette from the...

8.8CVSS0.00664EPSS
SaveExploits1References1
CVE
CVE
added 2025/08/25 2:17 p.m.57 views

CVE-2025-46407

The CVE-2025-46407 entry concerns a memory corruption vulnerability in the BMPv3 Palette Decoding functionality of the SAIL Image Decoding Library v0.9.8. The root cause is an integer overflow while reading the palette from a specially crafted BMP file, which can overflow a heap-based buffer. Thi...

8.8CVSS8.3AI score0.00664EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
added 2025/08/25 2:17 p.m.21 views

CVE-2025-46407

A memory corruption vulnerability exists in the BMPv3 Palette Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .bmp file, an integer overflow can be made to occur which will cause a heap-based buffer to overflow when reading the palette from the...

8.8CVSS6.5AI score0.00664EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2025/08/25 2:17 p.m.4 views

CVE-2025-46407

A memory corruption vulnerability exists in the BMPv3 Palette Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .bmp file, an integer overflow can be made to occur which will cause a heap-based buffer to overflow when reading the palette from the...

8.8CVSS7.7AI score0.00664EPSS
SaveExploits1References1
OSV
OSV
added 2025/08/25 2:17 p.m.7 views

CVE-2025-46407

A memory corruption vulnerability exists in the BMPv3 Palette Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .bmp file, an integer overflow can be made to occur which will cause a heap-based buffer to overflow when reading the palette from the...

8.8CVSS8.3AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/08/25 2:17 p.m.4 views

CVE-2025-32468

A memory corruption vulnerability exists in the BMPv3 Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .bmp file, an integer overflow can be made to occur when calculating the stride for decoding. Afterwards, this will cause a heap-based...

8.8CVSS8.3AI score0.00859EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2025/08/25 2:17 p.m.11 views

CVE-2025-32468

A memory corruption vulnerability exists in the BMPv3 Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .bmp file, an integer overflow can be made to occur when calculating the stride for decoding. Afterwards, this will cause a heap-based...

8.8CVSS6.4AI score0.00859EPSS
SaveExploits1
Cvelist
Cvelist
added 2025/08/25 2:17 p.m.26 views

CVE-2025-32468

A memory corruption vulnerability exists in the BMPv3 Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .bmp file, an integer overflow can be made to occur when calculating the stride for decoding. Afterwards, this will cause a heap-based...

8.8CVSS0.00859EPSS
SaveExploits1References1
CVE
CVE
added 2025/08/25 2:17 p.m.56 views

CVE-2025-32468

CVE-2025-32468 : A memory corruption vulnerability exists in the BMPv3 Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .bmp, an integer overflow occurs during stride calculation, leading to a heap-based buffer overflow during decoding and p...

8.8CVSS8.3AI score0.00859EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2025/08/25 2:17 p.m.8 views

CVE-2025-32468

A memory corruption vulnerability exists in the BMPv3 Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .bmp file, an integer overflow can be made to occur when calculating the stride for decoding. Afterwards, this will cause a heap-based...

8.8CVSS8.3AI score
SaveExploits0References4
CVE
CVE
added 2025/08/25 2:17 p.m.53 views

CVE-2025-52930

CVE-2025-52930 affects the BMPv3 RLE Decoding functionality in the SAIL Image Decoding Library v0.9.8 . A memory corruption due to a heap-based buffer overflow during BMP data decompression can lead to remote code execution if an attacker can induce the library to read a specially crafted BMP fil...

8.8CVSS8.4AI score0.00933EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/25 2:17 p.m.7 views

CVE-2025-52930

A memory corruption vulnerability exists in the BMPv3 RLE Decoding functionality of the SAIL Image Decoding Library v0.9.8. When decompressing the image data from a specially crafted .bmp file, a heap-based buffer overflow can occur which allows for remote code execution. An attacker will need to...

8.8CVSS8.4AI score0.00933EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2025/08/25 2:17 p.m.13 views

CVE-2025-52930

A memory corruption vulnerability exists in the BMPv3 RLE Decoding functionality of the SAIL Image Decoding Library v0.9.8. When decompressing the image data from a specially crafted .bmp file, a heap-based buffer overflow can occur which allows for remote code execution. An attacker will need to...

8.8CVSS6.5AI score0.00933EPSS
SaveExploits1
OSV
OSV
added 2025/08/25 2:17 p.m.9 views

CVE-2025-52930

A memory corruption vulnerability exists in the BMPv3 RLE Decoding functionality of the SAIL Image Decoding Library v0.9.8. When decompressing the image data from a specially crafted .bmp file, a heap-based buffer overflow can occur which allows for remote code execution. An attacker will need to...

8.8CVSS8.4AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/08/25 12:00 a.m.16 views

PT-2025-34616

Name of the Vulnerable Software and Affected Versions: SAIL Image Decoding Library version 0.9.8 Description: A memory corruption issue exists in the BMPv3 Image Decoding functionality. Loading a specially crafted .bmp file can cause an integer overflow when calculating the stride for decoding,...

8.8CVSS7.8AI score0.00859EPSS
SaveExploits1References10
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2016-9113

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a NULL pointer dereference in function imagetobmp of convertbmp.c:980 of OpenJPEG 2.1.2. image-comps0.data is not assigned a value after...

7.5CVSS7.4AI score0.0305EPSS
SaveExploits1References3
Rows per page
Query Builder