2652 matches found
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the dwauncompress function when decoding OpenEXR files with DWAA or DWAB compression. An attacker can cause arbitrary memory writes by crafting files with mismatched channel types and counts, leading to pointer...
CVE-2025-59733
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...
UBUNTU-CVE-2025-59733
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...
CVE-2025-59733 Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...
CVE-2025-59733 Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...
CVE-2025-59733
FFmpeg/OpenEXR dwa_uncompress vulnerability (CVE-2025-59733): OpenEXR DWAA/DWAB decoding incorrectly assumes all channels share the same pixel type/size and that four channels map to B, G, R, A. If the main color channels are 4-byte and there are duplicate/unknown channels with 2-byte EXR_HALF, c...
CVE-2025-59733 Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...
CVE-2025-59733
When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...
CVE-2023-53589 wifi: iwlwifi: mvm: don't trust firmware n_channels
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't trust firmware nchannels If the firmware sends us a corrupted MCC response with nchannels much larger than the command response can be, we might copy far too much uninitialized memory and even crash if t...
CVE-2023-53589
CVE-2023-53589 affects the Linux kernel’s wireless stack: the iwlwifi mvm driver may mishandle a corrupted MCC response from firmware if n_channels is larger than the command response can contain. This can lead to copying excessive (uninitialized) memory and, in extreme cases, a crash due to memo...
EUVD-2024-53809
Malicious code in bioql PyPI...
EUVD-2025-30238
Malicious code in bioql PyPI...
EUVD-2025-16489
Malicious code in bioql PyPI...
EUVD-2024-2608
Malicious code in bioql PyPI...
EUVD-2024-53811
Malicious code in bioql PyPI...
EUVD-2024-53812
Malicious code in bioql PyPI...
EUVD-2024-34458
Malicious code in bioql PyPI...
EUVD-2023-2196
Malicious code in bioql PyPI...