12830 matches found
CVE-2023-37837
libjpeg commit db33a6e was discovered to contain a heap buffer overflow via LineBitmapRequester::EncodeRegion at linebitmaprequester.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...
CVE-2023-37836
libjpeg commit db33a6e was discovered to contain a reachable assertion via BitMapHook::BitMapHook at bitmaphook.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...
libjpeg 安全漏洞
libjpeg is a C language library for processing JPEG format image data. It includes JPEG decoding, JPEG encoding and other JPEG functions. A security vulnerability exists in libjpeg version db33a6e, which stems from an alertion issue via BitMapHook::BitMapHook include reachable in itmaphook.cpp,...
PT-2023-26139 · Libjpeg +1 · Libjpeg +1
Name of the Vulnerable Software and Affected Versions: libjpeg affected versions not specified Description: A reachable assertion was discovered in libjpeg via BitMapHook::BitMapHook at bitmaphook.cpp, allowing attackers to cause a Denial of Service DoS via a crafted file. Recommendations: At the...
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to writing beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to writing beyond the buffer in memory. Exploiting these...
CVE-2023-2762
A Use-After-Free vulnerability in SLDPRT file reading procedure exists in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted SLDPRT file...
SUSE CVE-2021-33798
A null pointer dereference was found in libpano13, version libpano13-2.9.20. The flow allows attackers to cause a denial of service and potential code execute via a crafted file...
PT-2023-5559 · Siemens · Tecnomatix Plant Simulation
Name of the Vulnerable Software and Affected Versions: Tecnomatix Plant Simulation versions prior to V2201.0008 Tecnomatix Plant Simulation versions prior to V2302.0002 Description: A vulnerability has been identified in the affected application, which contains an out of bounds write past the end...
PT-2023-3535 · Unknown · Raw Image Extension
Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to insufficient input validation in the Raw Image Extension plugin. Exploitation of this issue may allow an attacker to execute arbitrary code by sending a...
PT-2023-3857 · Microsoft · Windows Geolocation Service +1
Name of the Vulnerable Software and Affected Versions: Windows Geolocation Service affected versions not specified Description: The issue is related to insufficient input validation in the Windows Geolocation Service, which can be exploited by an attacker to execute arbitrary code using a special...
PT-2023-3519 · Unknown · Vp9 Video Extensions
Name of the Vulnerable Software and Affected Versions: VP9 Video Extensions affected versions not specified Description: The issue is related to insufficient protection of internal data in the VP9 Video Extensions package. Exploitation of this issue may allow an attacker to gain unauthorized acce...
PT-2023-3538 · Microsoft · Paint 3D
Name of the Vulnerable Software and Affected Versions: Paint 3D affected versions not specified Description: The issue is related to insufficient input validation in the Paint 3D application, which can be exploited by an attacker to execute arbitrary code using a specially crafted malicious file...
PT-2023-3526 · Microsoft · Outlook +1
Name of the Vulnerable Software and Affected Versions: Microsoft Outlook affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Outlook. It allows a remote attacker to execute arbitrary code on the target system by using a crafted file. Thi...
OESA-2023-1406 ImageMagick security update
Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...
CVE-2021-33798
A null pointer dereference was found in libpano13, version libpano13-2.9.20. The flow allows attackers to cause a denial of service and potential code execute via a crafted file...
CVE-2021-33798
A null pointer dereference was found in libpano13, version libpano13-2.9.20. The flow allows attackers to cause a denial of service and potential code execute via a crafted file...
CVE-2021-33798
A null pointer dereference was found in libpano13, version libpano13-2.9.20. The flow allows attackers to cause a denial of service and potential code execute via a crafted file...
CVE-2021-33798
A null pointer dereference was found in libpano13, version libpano13-2.9.20. The flow allows attackers to cause a denial of service and potential code execute via a crafted file...
CVE-2023-30207
CVE-2023-30207 concerns Kodi (affecting Kodi 19.5 and earlier). A divide-by-zero vulnerability in MP3 handling allows a denial-of-service when processing crafted MP3 files. CVSS from initial record: Local attack vector, user interaction required, no confidentiality or integrity impact, availabili...