Lucene search
+L

277 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 5:6 a.m.4 views

SUSE CVE-2016-2191

The bmpreadrows function in pngxtern/pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service invalid memory write and crash via a series of delta escapes in a crafted BMP image...

6.5CVSS7.1AI score0.03519EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:56 a.m.5 views

SUSE CVE-2016-8685

The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of service invalid memory access and crash via a crafted BMP image...

5.5CVSS6.8AI score0.01389EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:53 a.m.6 views

SUSE CVE-2016-10504

Heap-based buffer overflow vulnerability in the opjmqcbyteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service application crash via a crafted bmp file...

9.4CVSS7.1AI score0.08253EPSS
SaveExploits2References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:53 a.m.5 views

SUSE CVE-2016-10507

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted bmp file...

6.3CVSS7.1AI score0.02112EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:46 a.m.6 views

SUSE CVE-2017-8354

In ImageMagick 7.0.5-5, the ReadBMPImage function in bmp.c allows attackers to cause a denial of service memory leak via a crafted file...

6.5CVSS8.4AI score0.01935EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:34 a.m.5 views

SUSE CVE-2018-1152

libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image...

3.3CVSS6.8AI score0.03445EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
added 2023/02/15 4:31 a.m.4 views

SUSE CVE-2018-5727

In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opjt1encodecblks function openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

4.3CVSS6.8AI score0.01894EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:30 a.m.5 views

SUSE CVE-2018-6616

In OpenJPEG 2.3.0, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

4.3CVSS6.6AI score0.01733EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:30 a.m.7 views

SUSE CVE-2018-6876

The OLEProperty class in ole/oleprop.cpp in libfpx 1.3.1-10, as used in ImageMagick 7.0.7-22 Q16 and other products, allows remote attackers to cause a denial of service stack-based buffer under-read via a crafted bmp image...

6.5CVSS9AI score0.02466EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:21 a.m.6 views

SUSE CVE-2018-20185

In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits...

3.3CVSS6.8AI score0.02107EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2022/05/20 10:35 p.m.21 views

CVE-2018-7640

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a Monochrome case, aka case 1...

7.8CVSS3AI score0.01349EPSS
SaveExploits2References1
OSV
OSV
added 2022/03/26 11:3 a.m.4 views

OESA-2022-1592 SDL2 security update

Simple DirectMedia Layer SDL is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device. Security Fixes: There is a heap overflow problem in video/SDLpixels.c in SDL Simple DirectMedia Layer 2.x to 2.0.18 versions. By crafting a malicious...

8.8CVSS7.4AI score0.01986EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/02/18 8:15 p.m.7 views

CVE-2021-46606

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

7.8CVSS7.6AI score0.02005EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2022/01/13 10:15 p.m.30 views

CVE-2021-34903

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS0.02113EPSS
SaveExploits0References2
OSV
OSV
added 2022/01/10 2:10 p.m.22 views

CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

7.8CVSS7.8AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2022/01/10 2:10 p.m.6 views

CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

7.8CVSS8AI score0.07349EPSS
SaveExploits4References6
UbuntuCve
UbuntuCve
added 2022/01/10 2:10 p.m.32 views

CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

7.8CVSS7.9AI score0.07349EPSS
SaveExploits4References6
Positive Technologies
Positive Technologies
added 2021/11/12 12:0 a.m.4 views

PT-2021-23884 · Htmldoc +5 · Htmldoc +5

Name of the Vulnerable Software and Affected Versions: HTMLDOC versions prior to 1.9.14 Description: A stack-based buffer overflow in the image load bmp function results in remote code execution if the victim converts an HTML document linking to a crafted BMP file. Recommendations: For versions...

10CVSS7.5AI score0.07349EPSS
SaveExploits22References111
RedHat Linux
RedHat Linux
added 2021/11/09 5:42 p.m.7 views

openjpeg: integer overflow in opj_t1_encode_cblks in src/lib/openjp2/t1.c

In OpenJPEG 2.3.0, there is an integer overflow vulnerability in the opjt1encodecblks function openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

6.5CVSS5.9AI score0.01894EPSS
SaveExploits1References4
NVD
NVD
added 2021/11/03 5:15 p.m.18 views

CVE-2021-40985

A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to imageloadbmp...

5.5CVSS0.00871EPSS
SaveExploits1References3
Rows per page
Query Builder