CVE-2013-2729

Adobe Reader BMP/RLE ヒープ破損 - CVE-2013-2729 Adobe Reader X は、Adobe Systems が開発した、Portable Document Format PDF ファイルの表示、作成、編集、印刷、管理を行うための強力なソフトウェアソリューションです。バージョン 10 以降には、Google Chrome と同様のサンドボックステクノロジーである Protected Mode が含まれており、製品全体のセキュリティが向上しています。 Title: Adobe Reader BMP/RLE heap corruption CVE Nam...

zsteg

zsteg ====== 説明 PNGおよびBMPにステガノグラフィーで隠されたデータを検出します インストール root@kitploit: gem install zsteg 検出: PNGおよびBMPのLSBステガノグラフィー zlib圧縮データ OpenStego Camouflage 1.2.1 エラトステネスの集合を用いたLSB 使い方 root@kitploit: zsteg -h Usage: zsteg options filename.png paramstring -a, --all try all known methods -E, --extract NAME...

LogoFail-PoC

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 私たちは、テロ組織ハマスによって人質に取られたすべての市民の安全な帰還を要求します。すべての人質が解放され、無事に帰還するまで、私たちは休みません。あなたも彼らを家に連れ戻すのを助けることができます。https://stories.bringthemhomenow.net/ BIOSイメージパーサーエクスプロイトツール 💻 このツールは、BIOSイメージパーサーのバッファオーバーフロー脆弱性を悪用するデモです。教育目的のみを意図しています。 概要 ℹ️...

CVE-2026-50291

A flaw was found in OpenImageIO, a toolset for image file manipulation. A remote attacker could exploit this vulnerability by providing a specially crafted BMP Bitmap image file. Processing this malicious file can lead to an invalid read operation during image decoding, causing the application to...

CVE-2019-8014

CVE-2019-8014 の簡単な分析です。 Poc と exp を含みます。 Shellcode は電卓または CMD ウィンドウを表示するものです。覚えていません。 注意： my.7z は脆弱性をトリガーするために必要な bmp 画像です。ファイルが大きすぎたので圧縮しました。...

CVE-2013-3664_BMP

Sketchup BMP Material RLE4 ヒープオーバーフロー - CVE-2013-3664 SketchUpは、埋め込まれたBMP RLE4圧縮テクスチャを解析する際に入力を検証しない。悪意のあるテクスチャ、サムネイル、または背景画像がヒープオーバーフローを引き起こすと、任意のコード実行が可能になることが証明されている。この問題は、Windows Explorerが.skpファイル内の埋め込みサムネイルを読み取った場合にも引き起こされる可能性がある。 概要 タイトル: Sketchup BMP Material RLE4 ヒープオーバーフロー CVE ID:...

Linux Distros Unpatched Vulnerability : CVE-2026-50291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to versions 3.0.16.0 and...

CVE-2026-50291

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to versions 3.0.16.0 and 3.1.11.0, processing a crafted BMP file through oiiotool or an application linked to OpenImageIO can reach BMP palette handling in...

UBUNTU-CVE-2026-50291

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to versions 3.0.16.0 and 3.1.11.0, processing a crafted BMP file through oiiotool or an application linked to OpenImageIO can reach BMP palette handling in...

CVE-2026-50291

OpenImageIO , a toolset for reading and writing image files used in VFX/animation, is vulnerable to a segmentation fault in BmpInput::read_native_scanline (src/bmp.imageio/bmpinput.cpp:399) prior to versions 3.0.16.0 and 3.1.11.0 . When a crafted BMP file with an empty color table is processed th...

CVE-2026-50291

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to versions 3.0.16.0 and 3.1.11.0, processing a crafted BMP file through oiiotool or an application linked to OpenImageIO can reach BMP palette handling in...

CVE-2026-50291: Out-of-bounds Read

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to versions 3.0.16.0 and 3.1.11.0, processing a crafted BMP file through oiiotool or an application linked to OpenImageIO can reach BMP palette handling in...

Astra Linux – Vulnerability in imagemagick

A heap use-after-free flaw was discovered in the coder/bmp.c file of ImageMagick...

Astra Linux – Vulnerability in imagemagick

A flaw was discovered in ImageMagick, specifically in the code file coders/bmp.c. An attacker who submits a crafted file processed by ImageMagick could trigger undefined behavior, resulting in values that are outside the range of the type unsigned int. This likely leads to a disruption in the...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.0, the gdisurfacebits function processed SURFACEBITSCOMMAND messages sent by the RDP server. When these commands were processed using NSCodec, the bmp.width and bmp.height values provided by the server were not...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: SDL (UTSA-2023-003818)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003818 advisory. SDL Simple DirectMedia Layer through 2.0.12 has an Integer Overflow and resultant SDLmemcpy heap corruption in SDLBlitCopy in video/SDLblitcopy.c via a crafted .BMP...

golang.org/x/image/bmp: golang: golang.org/x/image/bmp: Denial of Service via out-of-range palette index in BMP decoding

A flaw was found in golang.org/x/image/bmp. A remote attacker could exploit this vulnerability by providing a specially crafted paletted BMP Bitmap file. Decoding this file with an out-of-range palette index causes the application to panic when accessing invalid image pixels, leading to a Denial ...

The vulnerability of the ParseBody() function in the pkg/packet/bmp/bmp.go file of the BMP Parser component of the GoBGP edge gateway protocol allows a attacker to cause a service failure.

The vulnerability of the ParseBody function in the pkg/packet/bmp/bmp.go file of the BMP Parser component of the GoBGP edge gateway protocol is related to the situation where the output of the operation goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a...

golang.org/x/image/bmp: golang: golang.org/x/image/bmp: Denial of Service via out-of-range palette index in BMP decoding

A flaw was found in golang.org/x/image/bmp. A remote attacker could exploit this vulnerability by providing a specially crafted paletted BMP Bitmap file. Decoding this file with an out-of-range palette index causes the application to panic when accessing invalid image pixels, leading to a Denial ...

K000163015: libjpeg-turbo vulnerabilities CVE-2018-1152 and CVE-2020-13790

Security Advisory Description CVE-2018-1152 libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image. CVE-2020-13790 libjpeg-turbo 2.0.4, and mozjpeg 4.0.0, has a heap-based buffer over-read in getrgbrow in rdppm.c via ...