Lucene search
K

2484 matches found

PyPA
PyPA
added 2020/05/04 3:15 p.m.4 views

PYSEC-2020-269

TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decodebmpop.cc...

6.5CVSS7.1AI score0.00128EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2020/05/04 2:12 p.m.1 views

CVE-2018-21233

TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decodebmpop.cc...

6.5CVSS7.3AI score0.00128EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2020/04/28 4:3 p.m.68 views

Moderate: Red Hat Security Advisory: fontforge security update

An update for fontforge is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

8.8CVSS7.3AI score0.00279EPSS
Exploits1References3
Veracode
Veracode
added 2020/04/10 1:9 a.m.21 views

Arbitrary Code Execution

freetype is vulnerable to arbitrary code execution. The vulnerability exists as multiple flaws were found in the way FreeType handled TrueType Font TTF, Glyph Bitmap Distribution Format BDF, Windows .fnt and .fon, and PostScript Type 1 fonts. If a specially-crafted font file was loaded by an...

9.3CVSS1.9AI score0.03525EPSS
Exploits0References23Affected Software1
Veracode
Veracode
added 2020/04/10 1:3 a.m.40 views

Denial Of Service (DoS)

FreeType is vulnerable to denial of service DoS. Multiple input validation flaws were found in the way FreeType processed bitmap font files. If a specially-crafted font file was loaded by an application linked against FreeType, it could cause the application to crash or, potentially, execute...

4.3CVSS4.2AI score0.02935EPSS
Exploits0References16Affected Software1
Veracode
Veracode
added 2020/04/10 12:56 a.m.27 views

Arbitrary Code Execution

gimp is vulnerable to arbitrary code execution. An integer overflow flaw, leading to a heap-based buffer overflow, was found in the GIMP's Microsoft Windows Bitmap BMP and Personal Computer eXchange PCX image file plug-ins. An attacker could create a specially-crafted BMP or PCX image file that,...

9.3CVSS3.2AI score0.0308EPSS
Exploits1References19Affected Software1
NVD
NVD
added 2020/04/04 5:15 p.m.13 views

CVE-2020-11528

bit2spr 1992-06-07 has a stack-based buffer overflow 129-byte write in convbitmap in bit2spr.c via a long line in a bitmap file...

7.5CVSS7.7AI score0.00489EPSS
Exploits1References2
OSV
OSV
added 2020/04/04 5:15 p.m.1 views

CVE-2020-11528

bit2spr 1992-06-07 has a stack-based buffer overflow 129-byte write in convbitmap in bit2spr.c via a long line in a bitmap file...

7.5CVSS6.2AI score
Exploits0References2
Prion
Prion
added 2020/04/04 5:15 p.m.10 views

Stack overflow

bit2spr 1992-06-07 has a stack-based buffer overflow 129-byte write in convbitmap in bit2spr.c via a long line in a bitmap file...

5CVSS7.7AI score0.00489EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2020/04/04 4:48 p.m.13 views

CVE-2020-11528

bit2spr 1992-06-07 has a stack-based buffer overflow 129-byte write in convbitmap in bit2spr.c via a long line in a bitmap file...

7.7AI score0.00489EPSS
Exploits1References2
CVE
CVE
added 2020/04/04 4:48 p.m.92 views

CVE-2020-11528

The CVE-2020-11528 issue affects bit2spr (bitmap format converter). A stack-based buffer overflow occurs in conv_bitmap (bit2spr.c) from a long line in a bitmap file, enabling a 129-byte write overflow. Public sources describe potential arbitrary code execution or a crash. No vendor/product versi...

7.5CVSS7.7AI score0.00489EPSS
Exploits1References2Affected Software1
Ubuntu
Ubuntu
added 2020/04/02 10:14 p.m.92 views

USN-4316-2: GD Graphics Library vulnerabilities

USN-4316-1 fixed a vulnerability in GD Graphics Library. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that GD Graphics Library incorrectly handled cloning an image. An attacker could possibly use this issue to cause GD Graphics...

7.5CVSS5.8AI score0.1054EPSS
Exploits1
OSV
OSV
added 2020/04/02 10:14 p.m.2 views

USN-4316-2 libgd2 vulnerabilities

USN-4316-1 fixed a vulnerability in GD Graphics Library. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that GD Graphics Library incorrectly handled cloning an image. An attacker could possibly use this issue to cause GD Graphics...

7.5CVSS6.1AI score0.1054EPSS
Exploits1References3
OSV
OSV
added 2020/04/02 10:6 p.m.2 views

USN-4316-1 libgd2 vulnerabilities

It was discovered that GD Graphics Library incorrectly handled cloning an image. An attacker could possibly use this issue to cause GD Graphics Library to crash, resulting in a denial of service. CVE-2018-14553 It was discovered that GD Graphics Library incorrectly handled loading images from X...

7.5CVSS6.1AI score0.1054EPSS
Exploits1References3
Ubuntu
Ubuntu
added 2020/04/02 10:6 p.m.95 views

USN-4316-1: GD Graphics Library vulnerabilities

It was discovered that GD Graphics Library incorrectly handled cloning an image. An attacker could possibly use this issue to cause GD Graphics Library to crash, resulting in a denial of service. CVE-2018-14553 It was discovered that GD Graphics Library incorrectly handled loading images from X...

7.5CVSS5.7AI score0.1054EPSS
Exploits1
RedHat Linux
RedHat Linux
added 2020/03/31 8:18 p.m.4 views

qt5-qtbase: QBmpHandler segmentation fault on malformed BMP file

An issue was discovered in Qt before 5.11.3. QBmpHandler has a buffer overflow via BMP data...

9.8CVSS6.1AI score0.04651EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2020/03/31 8:15 p.m.3 views

ImageMagick: infinite loop in coders/bmp.c

In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

6.5CVSS5.8AI score0.00374EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2020/03/31 8:15 p.m.4 views

ImageMagick: infinite loop in the ReadBMPImage function of the coders/bmp.c

In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

6.5CVSS5.8AI score0.00321EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2020/03/31 12:0 a.m.2 views

PT-2020-6921 · Freerdp +6 · Freerdp +6

Name of the Vulnerable Software and Affected Versions: FreeRDP versions 1.2 through 1.2 simplified to FreeRDP versions greater than 1.2 and before 2.0.0 Description: The issue is related to a double free error in the update read cache bitmap v3 order function of the FreeRDP RDP client. This error...

9.8CVSS6.1AI score0.02202EPSS
Exploits26References295
CNVD
CNVD
added 2020/03/05 12:0 a.m.1 views

Denial-of-service vulnerability in NA-VIEW V2.0 (for 15-inch touch screen) of Nanda Aotuo Technology Jiangsu Co.

NA-VIEW is a touch screen configuration software. NA-VIEW V2.0 for 15-inch touch screen has a denial-of-service vulnerability that can be exploited by attackers to construct malformed BMP images that can cause the program to crash...

6.9AI score
Exploits0
Rows per page
Query Builder