Heap-based Buffer Overflow in squell/id3

✍️ Description Hello! We compiled id3 from commit 857ac8 with Clang-13 + ASan, and we discovered a crafted file which triggers a negative-size-param and a heap-buffer-overflow with a READ of size 40987248. But for the purposes of this report, we are going to look at the heap-buffer-overflow, as it...

PT-2021-6308 · Microsoft · Office Word

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: The issue is related to a use-after-free condition in Microsoft Word, specifically with the handling of memory after it has been freed. This can be exploited by an attacker using a...

PT-2021-14797 · Accusoft · Accusoft Imagegear

Name of the Vulnerable Software and Affected Versions: Accusoft ImageGear version 19.9 Description: A stack-based buffer overflow issue exists in the PDF process fontname functionality. This can be triggered by a specially crafted malformed file, potentially leading to code execution. An attacker...

CVE-2021-21807

An integer overflow vulnerability exists in the DICOM parsedicommetainfo functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to a stack-based buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

The vulnerability of the MagickCore/gem-private.h component of the console-based image editing tool ImageMagick, related to division by zero, allows a hacker to cause a service failure.

The vulnerability of the MagickCore/gem-private.h component in the console-based image editing tool ImageMagick is related to division by zero. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially created file...

The vulnerability of the image-compositor.c component in the Cairo vector graphics library, related to buffer overflows in the data stack, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the image-compositor.c component in the Cairo vector graphics library is related to buffer overflows in the data stack. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a special...

The vulnerability of the coders/bmp.c component in the console-based graphic editor ImageMagick, related to the infinite execution of a loop, allows an attacker to cause a service failure.

The vulnerability of the coders/bmp.c component in the console-based graphic editor ImageMagick is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker who operates remotely to cause a service failure using a specially created file...

The vulnerability of the WriteEPTImage function in the coders/ept.c component of the console image editing tool ImageMagick allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures. This vulnerability is related to the repeated release of the memory area, enabling a hacker to access sensitive information.

The vulnerability of the WriteEPTImage function in the coders/ept.c component of the console-based image editing tool ImageMagick is related to the repeated release of a memory area. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, an...

The vulnerability in the MagickCore/statistic.c component of the console-based image editing tool ImageMagick, related to integer overflows, allows attackers to cause a service failure.

The vulnerability of the MagickCore/statistic.c component in the console-based image editing tool ImageMagick is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created file...

Out-of-bounds

There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...

CVE-2021-3598

There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...

The vulnerability of the functions CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo() in the /MagickCore/pixel.c component of the ImageMagick console-based graphic editor allows a attacker to cause a service failure.

The vulnerability of the functions CatromWeights, MeshInterpolate, InterpolatePixelChannel, InterpolatePixelChannels, and InterpolatePixelInfo in the /MagickCore/pixel.c component of the ImageMagick console graphics editor allows an attacker to cause a service failure by using a specially created...

CVE-2021-3598

There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...

The vulnerability of the coders/hdr.c component in the console-based image editing tool ImageMagick, related to integer overflow of values, allows a hacker to cause a service failure.

The vulnerability of the coders/hdr.c component in the console-based image editing tool ImageMagick is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created file...

The vulnerability of the `ApplyEvaluateOperator()` function in the `/MagickCore/statistic.c` file of the ImageMagick console graphics editor allows a malicious actor to cause a service failure by exploiting a numerical overflow condition.

The vulnerability of the ApplyEvaluateOperator function in the /MagickCore/statistic.c file of the ImageMagick console graphics editor allows for integer overflow of values. Exploiting this vulnerability enables a remote attacker to cause a service failure using a specially created file...

The vulnerability of the coders/bmp.c component in the console-based graphic editor ImageMagick, related to integer overflow of values, allows a hacker to cause a service failure.

The vulnerability of the coders/bmp.c component in the console-based graphic editor ImageMagick is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created file...

The vulnerability of the coders/txt.c component in the console-based image editing tool ImageMagick, related to integer overflow of values, allows a hacker to trigger a service failure.

The vulnerability of the coders/txt.c component in the console-based ImageMagick graphics editor is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created file...

The vulnerability of the MagickCore/quantum.h component of the console-based image editing tool ImageMagick, related to integer overflow of values, allows a hacker to cause a service failure.

The vulnerability of the MagickCore/quantum.h component in the console-based image editing tool ImageMagick is related to integer overflow. Exploiting this vulnerability allows a remote attacker to cause a service failure through a specially created file...

The vulnerability in the MagickCore/statistic.c component of the console-based image editing tool ImageMagick, related to integer overflows, allows an attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the MagickCore/statistic.c component in the console-based image editing tool ImageMagick is related to a potential overflow of integer values. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and even cause servic...

The vulnerability of the GammaImage() function in the /MagickCore/enhance.c component of the ImageMagick console graphics editor allows a attacker to cause a service failure.

The vulnerability of the GammaImage function in the /MagickCore/enhance.c component of the ImageMagick console graphics editor is related to division by zero. Exploiting this vulnerability allows a remote attacker to cause a service failure through a specially created file...