3676 matches found
UBUNTU-CVE-2023-3576
A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an application crash, eventually leading to a denia...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the stbiconvertformat function. An attacker can cause a denial of service by using a crafted pic file. Remediation There is no fixed version for stb. References - PoC Credit: peccc...
DEBIAN-CVE-2023-43898
Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbiconvertformat. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted pic file...
UBUNTU-CVE-2023-43898
Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbiconvertformat. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted pic file...
CVE-2023-3906
Removed by vendor...
The vulnerability of the PDF-XChange PDF document viewing and editing program, related to out-of-memory reading, allows attackers to disclose protected information.
The vulnerability of the PDF document viewing and editing software PDF-XChange is related to reading beyond the memory limit. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created TIF file...
WebM Project WebP Image Library (libwebp) < 1.3.2 Vulnerability
The version of WebM Project WebP Image Library libwebp installed on the remote host is prior to 1.3.2. It is, therefore, affected by a vulnerability: - Heap buffer overflow in libwebp prior to libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a specially crafted...
PT-2023-32977 · Google · Libwebp
Name of the Vulnerable Software and Affected Versions: libwebp affected versions not specified Description: A heap buffer overflow issue in libwebp allows a remote attacker to perform an out-of-bounds memory write via a crafted webp image. Recommendations: At the moment, there is no information...
The vulnerability of PDF-XChange Editor’s document viewing and editing software lies in its memory usage after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of the PDF document viewing and editing software PDF-XChange Editor lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created JPG file...
Amazon Linux 2 : libtiff, --advisory ALAS2-2023-2263 (ALAS-2023-2263)
The version of libtiff installed on the remote host is prior to 4.0.3-35. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2263 advisory. The DumpModeDecode function in libtiff 4.0.6 and earlier allows attackers to cause a denial of service invalid read and...
The vulnerability of the pngimage.c component in the libpng library, which allows a hacker to cause a service failure.
The vulnerability of the pngimage.c component in the libpng library arises due to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created PNG file...
Ubuntu 20.04 LTS / 22.04 LTS : GRUB2 vulnerabilities (USN-6355-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6355-1 advisory. Daniel Axtens discovered that specially crafted images could cause a heap-based out-of-bonds write. A local attacker could possibly use this ...
CVE-2023-41064
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura 13.5.2, iOS 15.7.9 and iPadOS 15.7.9, macOS Big Sur 11.7.10. Processing a maliciously crafted image may lead to arbitrary code execution...
USN-6353-1 plib vulnerability
Wooseok Kang discovered that PLIB did not properly manage memory under certain circumstances. If a user were tricked into opening a specially crafted TGA file, an attacker could possibly use this issue to cause applications using PLIB to crash, resulting in a denial of service, or possibly execut...
VulnCheck KEV: CVE-2023-41064
Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-2023-41061...
Fedora 38 : freeimage / mingw-freeimage (2023-a8b26b910d)
The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-a8b26b910d advisory. Update to latest svn revision. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...
SUSE CVE-2023-40745
LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service application crash or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow...
SUSE CVE-2023-41175
A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw allows remote attackers to cause a denial of service or possibly execute an arbitrary code via a crafted tiff image, which triggers a heap-based buffer overflow...
SUSE CVE-2020-21427
Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file...