CVE-2020-24292

Buffer Overflow vulnerability in load function in PluginICO.cpp in FreeImage 3.19.0 r1859 allows remote attackers to run arbitrary code via opening of crafted ico file...

LibTIFF 缓冲区错误漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains some command line tools for working with TIFF files. A security vulnerability exists in LibTIFF version 4.0.10, which originates from a heap buffer overflow in TIFFmemcpy in tifunix.c. An attack...

CVE-2020-22916

CVE-2020-22916 affects XZ 5.2.5: a flaw in the decompression algorithm can be exploited by decompressing a crafted file to trigger a denial of service. The exploited payload is described as a decompression bomb: decompression of 17,486 bytes reportedly expands to 114,881,179 bytes, which the vend...

CVE-2022-40090

An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file...

CVE-2020-22524

Buffer Overflow vulnerability in FreeImageLoad function in FreeImage Library 3.19.0r1828 allows attackers to cuase a denial of service via crafted PFM file...

CVE-2020-18232

Buffer Overflow vulnerability in function H5Sclose in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file...

CVE-2020-18494

Buffer Overflow vulnerability in function H5Sclose in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file...

Exiv2 缓冲区错误漏洞

Exiv2 is a suite of C++ libraries and command line applications for managing image metadata. It provides the ability to read and write image metadata in a variety of formats including EXIF, IPTC and XMP. A buffer overflow vulnerability exists in Exiv2 version 0.27.1, which stems from a boundary...

CVE-2020-24292

Buffer Overflow vulnerability in load function in PluginICO.cpp in FreeImage 3.19.0 r1859 allows remote attackers to run arbitrary code via opening of crafted ico file...

CVE-2020-18494

Buffer Overflow vulnerability in function H5Sclose in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file...

CVE-2020-18232

Buffer Overflow vulnerability in function H5Sclose in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file...

CVE-2020-18232

Buffer Overflow vulnerability in function H5Sclose in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file...

CVE-2020-21724

Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via opening of crafted ogg file...

CVE-2022-29654

Buffer overflow vulnerability in quoteforpmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file...

CVE-2021-46179

CVE-2021-46179 is a Reachable Assertion vulnerability in upx before 4.0.0 that can cause a denial of service when a crafted file is passed to the readx function. Public sources across multiple feeds confirm the flaw exists in upx’s handling of input that triggers an assertion, with the impact des...

CVE-2020-18494

Buffer Overflow vulnerability in function H5Sclose in H5S.c in HDF5 1.10.4 allows remote attackers to run arbitrary code via creation of crafted file...

CVE-2020-22916

An issue discovered in XZ 5.2.5 allows attackers to cause a denial of service via decompression of a crafted file. NOTE: the vendor disputes the claims of "endless output" and "denial of service" because decompression of the 17,486 bytes always results in 114,881,179 bytes, which is often a...

CVE-2020-18831

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

The vulnerability of the “convert” command in the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure.

The vulnerability of the ImageMagick console-based graphic editor’s “convert” command is related to the improper release of memory before deleting the last link. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created file...

The vulnerability relates to the output component of the OpenImageIO image processing library, which allows an attacker to access confidential data.

The vulnerability of the OpenImageIO image processing library’s output component is related to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data through a specially created file...