libraw:libraw_cr2_fuzzer: Heap-buffer-overflow in LibRaw_buffer_datastream::scanf_one

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5081846951313408 Project: libraw Fuzzing Engine: honggfuzz Fuzz Target: librawcr2fuzzer Job Type: honggfuzzasanlibraw Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

CVE-2020-27856

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-17431

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17430

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2020-17432

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-17432

Foxit Studio Photo vulnerability CVE-2020-17432 affects parsing of CR2 files and causes an out-of-bounds read due to inadequate input validation. This can lead to information disclosure and, when combined with other flaws, potential code execution in the target process. Exploitation requires user...

PT-2020-14981

Name of the Vulnerable Software and Affected Versions Foxit Studio Photo version 3.6.6.922 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The...

PT-2020-14983

Name of the Vulnerable Software and Affected Versions Foxit Studio Photo version 3.6.6.922 Description This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious fil...