Lucene search
+L

72 matches found

CNNVD
CNNVD
added 2023/09/20 12:0 a.m.6 views

CImg Library Security Vulnerability

CImg Library is an open source C++ library for image processing organized by Davidtschumperlé Greyc. A security vulnerability exists in CImg Library version v2.9.3. The vulnerability is exploited by attackers to obtain sensitive information via specially crafted JPEG files...

8.1CVSS6.5AI score0.00592EPSS
SaveExploits1References2
OSV
OSV
added 2023/09/20 12:0 a.m.16 views

CVE-2023-41484

An issue in cimg.eu Cimg Library v2.9.3 allows an attacker to obtain sensitive information via a crafted JPEG file...

8.1CVSS6.3AI score0.00592EPSS
SaveExploits1References3
GitLab Advisory Database
GitLab Advisory Database
added 2023/09/20 12:0 a.m.23 views

Missing Release of Memory after Effective Lifetime

An issue in cimg.eu Cimg Library v2.9.3 allows an attacker to obtain sensitive information via a crafted JPEG file...

8.1CVSS6.2AI score0.00592EPSS
SaveExploits1References2Affected Software1
Fedora
Fedora
added 2021/04/26 12:27 a.m.36 views

[SECURITY] Fedora 34 Update: CImg-2.9.7-1.fc34

The CImg Library is an open-source C++ toolkit for image processing. It consists in a single header file 'CImg.h' providing a minimal set of C++ classes and methods that can be used in your own sources, to load/save, process and display images. Very portable, efficient and easy to use, it's a...

8.1CVSS0.9AI score0.01467EPSS
SaveExploits1
Fedora
Fedora
added 2021/04/19 5:51 p.m.51 views

[SECURITY] Fedora 32 Update: CImg-2.9.7-1.fc32

The CImg Library is an open-source C++ toolkit for image processing. It consists in a single header file 'CImg.h' providing a minimal set of C++ classes and methods that can be used in your own sources, to load/save, process and display images. Very portable, efficient and easy to use, it's a...

8.1CVSS0.9AI score0.01467EPSS
SaveExploits1
Fedora
Fedora
added 2021/04/19 5:45 p.m.44 views

[SECURITY] Fedora 33 Update: CImg-2.9.7-1.fc33

The CImg Library is an open-source C++ toolkit for image processing. It consists in a single header file 'CImg.h' providing a minimal set of C++ classes and methods that can be used in your own sources, to load/save, process and display images. Very portable, efficient and easy to use, it's a...

8.1CVSS0.9AI score0.01467EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.6 views

The vulnerability of the load_pnm() function in the CImg library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the loadpnm function in the CImg library arises from the operation being performed outside the buffer’s boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information throu...

8.1CVSS7.4AI score0.01467EPSS
SaveExploits1References6Affected Software2
OSV
OSV
added 2020/12/03 5:15 p.m.5 views

UBUNTU-CVE-2020-25693

A flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer overflows in loadpnm can be triggered by a specially crafted input file processed by CImg, which can lead to an impact to application availability or data integrity...

8.1CVSS5.9AI score0.01467EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:0 a.m.11 views

The vulnerability of the `load_bmp` function in the CImg library, which allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the loadbmp function in the CImg library arises from the execution of an operation outside the buffer’s boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information throu...

7.8CVSS7.3AI score0.01349EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:0 a.m.10 views

The vulnerability of the `load_bmp` function in the CImg library, which allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the loadbmp function in the CImg library is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information through the use of a specially created BMP image...

7.8CVSS7.1AI score0.01343EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:0 a.m.13 views

The vulnerability of the CImg library arises from an operation that occurs outside the buffer in memory, allowing a malicious actor to cause a service failure.

The vulnerability of the CImg library arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure due to the loading of a specially created BMP image...

7.8CVSS7.4AI score0.01098EPSS
SaveExploits1References3Affected Software2
CNVD
CNVD
added 2019/08/01 12:0 a.m.6 views

CImg Heap Buffer Overflow Vulnerability

CImg Library is an open source C++ library for image processing . A buffer overflow vulnerability exists in the loadbmp file in the CImg.h file in CImg Library versions 2.6.7 and earlier. The vulnerability stems from a networked system or product performing operations in memory without properly...

8.8CVSS7.3AI score0.01749EPSS
SaveExploits0References1
OSV
OSV
added 2019/07/31 3:15 p.m.5 views

UBUNTU-CVE-2019-13568

CImg through 2.6.7 has a heap-based buffer overflow in loadbmp in CImg.h because of erroneous memory allocation for a malformed BMP image...

8.8CVSS7.5AI score0.01749EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/07/26 12:0 a.m.4 views

CImg Library Command Injection Vulnerability

CImg Library is an open source C++ library for image processing . A command injection vulnerability exists in the 'loadnetwork' function in CImg The CImg Library version 2.3.3 and earlier. The vulnerability stems from a network system or product not properly filtering specific elements of...

9.8CVSS7.8AI score0.04912EPSS
SaveExploits0References1
NVD
NVD
added 2019/07/25 2:15 p.m.23 views

CVE-2019-1010174

CImg The CImg Library v.2.3.3 and earlier is affected by: command injection. The impact is: RCE. The component is: loadnetwork function. The attack vector is: Loading an image from a user-controllable url can lead to command injection, because no string sanitization is done on the url. The fixed...

9.8CVSS9.8AI score0.04912EPSS
SaveExploits0References3
OSV
OSV
added 2019/07/25 2:15 p.m.8 views

CVE-2019-1010174

CImg The CImg Library v.2.3.3 and earlier is affected by: command injection. The impact is: RCE. The component is: loadnetwork function. The attack vector is: Loading an image from a user-controllable url can lead to command injection, because no string sanitization is done on the url. The fixed...

9.8CVSS9.7AI score
SaveExploits0References3
Prion
Prion
added 2019/07/25 2:15 p.m.19 views

Command injection

CImg The CImg Library v.2.3.3 and earlier is affected by: command injection. The impact is: RCE. The component is: loadnetwork function. The attack vector is: Loading an image from a user-controllable url can lead to command injection, because no string sanitization is done on the url. The fixed...

7.5CVSS9.7AI score0.04912EPSS
SaveExploits0References3Affected Software2
UbuntuCve
UbuntuCve
added 2019/07/25 2:15 p.m.29 views

CVE-2019-1010174

CImg The CImg Library v.2.3.3 and earlier is affected by: command injection. The impact is: RCE. The component is: loadnetwork function. The attack vector is: Loading an image from a user-controllable url can lead to command injection, because no string sanitization is done on the url. The fixed...

9.8CVSS7.1AI score0.04912EPSS
SaveExploits0References3
OSV
OSV
added 2019/07/25 2:15 p.m.5 views

UBUNTU-CVE-2019-1010174

CImg The CImg Library v.2.3.3 and earlier is affected by: command injection. The impact is: RCE. The component is: loadnetwork function. The attack vector is: Loading an image from a user-controllable url can lead to command injection, because no string sanitization is done on the url. The fixed...

9.8CVSS7.1AI score0.04912EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2019/07/25 1:12 p.m.24 views

CVE-2019-1010174

CImg The CImg Library v.2.3.3 and earlier is affected by: command injection. The impact is: RCE. The component is: loadnetwork function. The attack vector is: Loading an image from a user-controllable url can lead to command injection, because no string sanitization is done on the url. The fixed...

9.7AI score0.04912EPSS
SaveExploits0References3
Rows per page
Query Builder