Lucene search
+L

279 matches found

NVD
NVD
added 2021/11/03 5:15 p.m.22 views

CVE-2021-40985

A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to imageloadbmp...

5.5CVSS0.00937EPSS
SaveExploits1References3
OSV
OSV
added 2021/11/03 5:15 p.m.6 views

UBUNTU-CVE-2021-40985

A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to imageloadbmp...

5.5CVSS6.3AI score0.00937EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2021/11/03 4:08 p.m.45 views

CVE-2021-40985

A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to imageloadbmp...

6.3AI score0.00937EPSS
SaveExploits1References3
OSV
OSV
added 2021/09/28 4:15 p.m.10 views

CVE-2021-29365

Irfanview 4.57 is affected by an infinite loop when processing a crafted BMP file in the EFFECTS!AutoCropW component. This can cause a denial of service DOS...

5.5CVSS6.1AI score0.00659EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/07/07 12:00 a.m.16 views

The vulnerability of the ReadBMPImage function in the coders/bmp.c component of the console image editing tool ImageMagick, related to infinite loop execution, allows attackers to cause a service failure.

The vulnerability of the ReadBMPImage function in the coders/bmp.c component of the ImageMagick console graphics editor is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created BMP file...

6.5CVSS6.9AI score0.03003EPSS
SaveExploits1References10Affected Software3
OSV
OSV
added 2021/01/26 6:16 p.m.14 views

CVE-2021-26025

PlugIns\IDEACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDEACDStd!zlibVersion+0x0000000000004e5e via a crafted BMP image...

7.8CVSS7.1AI score0.00705EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/26 6:16 p.m.33 views

CVE-2021-26025

PlugIns\IDEACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDEACDStd!zlibVersion+0x0000000000004e5e via a crafted BMP image...

7.8CVSS7.5AI score0.00705EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/26 6:16 p.m.28 views

CVE-2021-26026

PlugIns\IDEACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDEACDStd!JPEGTransW+0x000000000000c7f4 via a crafted BMP image...

7.8CVSS7.5AI score0.00705EPSS
SaveExploits0References1
Prion
Prion
added 2021/01/26 6:16 p.m.29 views

Code injection

PlugIns\IDEACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDEACDStd!JPEGTransW+0x000000000000c7f4 via a crafted BMP image...

6.8CVSS7.5AI score0.00705EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/01/26 6:16 p.m.18 views

Code injection

PlugIns\IDEACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDEACDStd!zlibVersion+0x0000000000004e5e via a crafted BMP image...

6.8CVSS7.5AI score0.00705EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/01/25 6:27 a.m.29 views

CVE-2021-26025

PlugIns\IDEACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDEACDStd!zlibVersion+0x0000000000004e5e via a crafted BMP image...

7.7AI score0.00705EPSS
SaveExploits0References1
CVE
CVE
added 2021/01/25 6:27 a.m.55 views

CVE-2021-26026

CVE-2021-26026 affects ACDSee Professional 2021 (version 14.0 build 1721). The vulnerability is a User Mode Write Access Violation in the IDE_ACDStd.apl component, triggered by a crafted BMP image, with the fault location reported as IDE_ACDStd!JPEGTransW+0x... The CVE is documented across multip...

7.8CVSS7.4AI score0.00705EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2021/01/19 8:15 p.m.2 views

DEBIAN-CVE-2020-14410

SDL Simple DirectMedia Layer through 2.0.12 has a heap-based buffer over-read in Blit3or4to3or4inversedrgb in video/SDLblitN.c via a crafted .BMP file...

5.4CVSS6.8AI score0.01666EPSS
SaveExploits0References1
Prion
Prion
added 2021/01/19 8:15 p.m.30 views

Heap overflow

SDL Simple DirectMedia Layer through 2.0.12 has a heap-based buffer over-read in Blit3or4to3or4inversedrgb in video/SDLblitN.c via a crafted .BMP file...

5.8CVSS6.2AI score0.01666EPSS
SaveExploits0References6Affected Software3
Debian CVE
Debian CVE
added 2021/01/19 12:00 a.m.77 views

CVE-2020-14409

SDL Simple DirectMedia Layer through 2.0.12 has an Integer Overflow and resultant SDLmemcpy heap corruption in SDLBlitCopy in video/SDLblitcopy.c via a crafted .BMP file...

7.8CVSS7.7AI score0.01305EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2020/12/23 12:00 a.m.8 views

PT-2021-3608 · Sdl +5 · Sdl +5

Name of the Vulnerable Software and Affected Versions: SDL Simple DirectMedia Layer versions 2.0.12 and earlier Description: The issue is related to an integer overflow in the SDL BlitCopy function in the video/SDL blit copy.c component of the Simple DirectMedia Layer library. This can lead to SD...

8.8CVSS7.3AI score0.05026EPSS
SaveExploits13References142
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.13 views

The vulnerability of the `load_bmp` function in the CImg library, which allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the loadbmp function in the CImg library arises from the execution of an operation outside the buffer’s boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information throu...

7.8CVSS7.3AI score0.01324EPSS
SaveExploits1References4Affected Software2
Debian CVE
Debian CVE
added 2020/02/12 2:37 a.m.62 views

CVE-2015-7508

Heap-based buffer overflow in the bmpdecoderle function in libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via the last row of RLE data in a crafted BMP file...

8.8CVSS9.2AI score0.02876EPSS
SaveExploits2
ATTACKERKB
ATTACKERKB
added 2020/02/11 9:15 p.m.4 views

CVE-2020-6065

An exploitable out-of-bounds write vulnerability exists in the bmpparsing function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafted BMP file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file...

9.8CVSS9AI score0.03687EPSS
SaveExploits1References2
Mageia
Mageia
added 2019/12/06 2:15 p.m.52 views

Updated openjpeg2 packages fix security vulnerability

The updated packages fix a security vulnerability: In OpenJPEG 2.3.1, there is excessive iteration in the opjt1encodecblks function of openjp2/t1.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. This issue is similar to CVE-2018-6616...

5.5CVSS5.2AI score0.02596EPSS
SaveExploits0References2
Rows per page
Query Builder