CVE-2015-8891

Multiple integer overflows in app/aboot/aboot.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices allow attackers to bypass intended access restrictions via a crafted image, aka Android internal bug 28842418 and Qualcomm internal bug CR813930...

Android Qualcomm Component Integer Overflow Vulnerability

Android on Nexus 5, etc. is an open source Linux-based operating system for Nexus 5, etc. smartphones developed by Google and the Open Handset Alliance OHA in the U.S. Qualcomm is a Qualcomm component used in Qualcomm devices. Qualcomm is a Qualcomm component used in Qualcomm devices. An integer...

The vulnerability of the PHP interpreter allows a remote attacker to cause an application to terminate abnormally.

The vulnerability in the PHP interpreter’s GetCode function, located in the gdgifin.c file of the GD component, allows a malicious actor to cause an unexpected termination of the application by reading memory beyond the buffer using a specially crafted GIF image. This image is incorrectly process...

CVE-2016-6161

The output function in gdgifout.c in the GD Graphics Library aka libgd allows remote attackers to cause a denial of service out-of-bounds read via a crafted image...

The vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability in GDI+, related to the processing of specially crafted images, allows for remote execution of code provided that the user opens a specially crafted image. Exploiting this vulnerability enables a malicious individual to gain full control over the system. They can then install...

The vulnerability of the Windows operating system allows a malicious individual to elevate their privileges or execute arbitrary code.

The vulnerability exists in Microsoft DirectShow and is related to the processing of specially crafted JPEG graphic files. Exploiting this vulnerability allows for the execution of code remotely, provided that the user opens a specially crafted graphic file. Exploiting this vulnerability also...

The vulnerability of the Firefox ESR browser allows a malicious individual to execute arbitrary code or perform a denial-of-service attack.

The Mozilla Firefox ESR browser contains a vulnerability related to errors in the source code file RasterImage.cpp. Exploiting this vulnerability allows malicious individuals to execute arbitrary code or cause service failures incorrect write operations by using specially crafted image data...

The vulnerability of the Firefox browser, which allows a malicious individual to execute arbitrary code or perform a denial-of-service attack

The Mozilla Firefox browser contains a vulnerability related to errors in the source code file RasterImage.cpp. Exploiting this vulnerability allows malicious individuals to execute arbitrary code or cause service failures incorrect write operations by using specially crafted image data...

The vulnerability of the Thunderbird email client, which allows a malicious individual to execute arbitrary code or perform a denial-of-service attack.

Mozilla Thunderbird’s email client contains a vulnerability related to errors in the source code file RasterImage.cpp. Exploiting this vulnerability allows malicious individuals to execute arbitrary code or trigger service failures by using specially crafted image data...

The vulnerability of the Mozilla SeaMonkey software package allows a malicious individual to execute arbitrary code or perform denial-of-service attacks.

Mozilla SeaMonkey software contains a vulnerability related to errors in the source code file RasterImage.cpp. Exploiting this vulnerability allows malicious individuals operating remotely to execute arbitrary code or trigger service failures by using specially crafted image data...

ImageMagick: Prevent NULL pointer access in magick/constitute.c

The WriteImages function in magick/constitute.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted image file...

UBUNTU-CVE-2016-5314

Buffer overflow in the PixarLogDecode function in tifpixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by overwriting the vgetparent function pointer wi...

CVE-2016-5315

The setByteArray function in tifdir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service out-of-bounds read via a crafted tiff image...

CVE-2016-5314

Buffer overflow in the PixarLogDecode function in tifpixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted TIFF image, as demonstrated by overwriting the vgetparent function pointer wi...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to trigger service interruptions

The vulnerability of the ImageIO component in iOS and Mac OS X operating systems is related to pointer dereferencing errors. Exploiting this vulnerability can allow a malicious actor to trigger a service failure dereferencing the zero pointer using a specially crafted image...

Silicon Graphics LibTiff Buffer Overflow Vulnerability (CNVD-2016-03846)

Silicon Graphics LibTiff is a library for reading and writing TIFF Tagged Image File Format files from the U.S. company Silicon Graphics. The library contains a number of command-line tools to deal with TIFF files. A buffer overflow vulnerability exists in the 'TIFFVGetField' function in Silicon...

Integer overflow

Multiple integer overflows in the 1 pixopscompositenearest, 2 pixopscompositecolornearest, and 3 pixopsprocess functions in pixops/pixops.c in gdk-pixbuf before 2.33.1 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted image, whi...

UBUNTU-CVE-2015-8875

Multiple integer overflows in the 1 pixopscompositenearest, 2 pixopscompositecolornearest, and 3 pixopsprocess functions in pixops/pixops.c in gdk-pixbuf before 2.33.1 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted image, whi...

CVE-2016-1811

ImageIO in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted image...

Null pointer dereference

ImageIO in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted image...