49 matches found
CVE-2026-66759 Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images
A flaw was found in the file-icns plugin in GIMP. When applying a decompressed mask during ICNS image processing, the plugin reads from the mask data buffer without verifying if the cursor exceeds the allocated resource size. If a crafted file contains a truncated mask resource, the icnsdecompres...
CVE-2026-42618
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsdecompress in compress.c that allows an attacker to corrupt one byte of heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file...
PT-2026-60525
Name of the Vulnerable Software and Affected Versions NTFS-3G versions prior to 2026.2.25 Description A heap buffer overflow occurs in the ntfs decompress function within the compress.c file. An attacker can corrupt one byte of heap memory in the SUID-root ntfs-3g binary by reading a specially...
Improper Handling of Highly Compressed Data (Data Amplification)
Overview py7zr is a Pure python 7-zip library Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the decompress function. An attacker can cause resource exhaustion by providing a specially crafted archive that expands to a much...
Advisory ROSA-SA-2026-3296
CVE-ID: CVE-2020-10809 BDU-ID: 2024-07119 CVE-Crit: MEDIUM CVE-DESC.: Vulnerability in the Decompress function in the decompress.c file. This vulnerability is related to writing beyond the memory bounds. Exploitation of this vulnerability could allow an attacker to cause a service failure...
freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write in RLE planar decode path
A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol RDP. A malicious RDP server can exploit a heap out-of-bounds write vulnerability in the planardecompressplanerle function. This vulnerability allows the server to write past the end of a temporary buffer, potentiall...
FreeRDP clear_decompress() Code Execution
The vulnerability of the cleardecompress function in the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause service failures...
EUVD-2017-16747
Malware in sbrugna...
EUVD-2020-3215
Malware in sbrugna...
EUVD-2021-32644
Malicious code in bioql PyPI...
CVE-2021-45935
Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress called from std::1::packagedtaskfuncstd::1::bindgrk::T1DecompressScheduler::deco and std::1::packagedtaskint...
HDF5 Decompress Buffer Overflow DoS
The vulnerability of the Decompress function in the decompress.c file is related to writing beyond the memory boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2024-40705 · Git +1 · Ndpi
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A stack-buffer-overflow READ 1 crash was reported. The crash occurred in the shoco decompress function, located in the fuzz alg shoco.cpp file. No...
PT-2023-35476 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.232 Description: The issue is related to the s390/decompressor in the Linux Kernel, where the length of the buffer in the decompress function is not properly specified, potentially leading to an overflow. T...
SUSE CVE-2006-1168
The decompress function in compress42.c in 1 ncompress 4.2.4 and 2 liblzw allows remote attackers to cause a denial of service crash, and possibly execute arbitrary code, via crafted data that leads to a buffer underflow...
DEBIAN-CVE-2021-45935
Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress called from std::1::packagedtaskfuncstd::1::bindgrk::T1DecompressScheduler::deco and std::1::packagedtaskint...
CVE-2021-45935
Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress called from std::1::packagedtaskfuncstd::1::bindgrk::T1DecompressScheduler::deco and std::1::packagedtaskint...
CVE-2020-28963
Passcovery Co. Ltd ZIP Password Recovery v3.70.69.0 was discovered to contain a buffer overflow via the decompress function...
