OpenImageIO Exif out-of-bounds write vulnerability

Talos Vulnerability Report TALOS-2022-1636 OpenImageIO Exif out-of-bounds write vulnerability December 22, 2022 CVE Number CVE-2022-41837 SUMMARY An out-of-bounds write vulnerability exists in the OpenImageIO::addexifitemtospec functionality of OpenImageIO Project OpenImageIO v2.4.4.2...

Debian: Security Advisory (DSA-5294-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5294-1] jhead security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5294-1 [email protected] https://www.debian.org/security/ Markus Koschany December 04, 2022 https://www.debian.org/security/faq -...

Fedora: Security Advisory for jhead (FEDORA-2022-628829f0e6)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 37 Update: jhead-3.06.0.1-5.fc37

Jhead displays and manipulates the non-image portions of EXIF formatted JPEG images, such as the images produced by most digital cameras...

DEBIAN-CVE-2021-34055

jhead 3.06 is vulnerable to Buffer Overflow via exif.c in function Put16u...

CVE-2021-34055

jhead 3.06 is vulnerable to Buffer Overflow via exif.c in function Put16u...

UBUNTU-CVE-2021-34055

jhead 3.06 is vulnerable to Buffer Overflow via exif.c in function Put16u...

jhead 安全漏洞

jhead is a tool for modifying JPEG file information. A security vulnerability exists in jhead version 3.06, which stems from a buffer overflow that can be achieved by an attacker via the Put16u function of its exif.c component...

JHead: Multiple Vulnerabilities

Background JHead is an EXIF JPEG header manipulation tool. Description Multiple vulnerabilities have been discovered in JHead. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround a...

GLSA-202210-28 : exif: Denial of Service

The remote host is affected by the vulnerability described in GLSA-202210-28 exif: Denial of Service - NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial of Service DoS by uploading a...

Fedora: Security Advisory for jhead (FEDORA-2022-61ec901852)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for jhead (FEDORA-2022-1d9133bc8e)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: jhead-3.06.0.1-5.fc35

Jhead displays and manipulates the non-image portions of EXIF formatted JPEG images, such as the images produced by most digital cameras...

[SECURITY] Fedora 36 Update: jhead-3.06.0.1-5.fc36

Jhead displays and manipulates the non-image portions of EXIF formatted JPEG images, such as the images produced by most digital cameras...

PT-2022-7117 · Unknown +1 · Openimageio +1

Name of the Vulnerable Software and Affected Versions: OpenImageIO versions prior to the fixed version Description: The issue is related to the add exif item to spec function in the OpenImageIO library, which can lead to stack-based memory corruption when processing specially-crafted exif metadat...

GHSA-PX9G-8HGV-JVG2 kamadak-exif vulnerable to Infinite loop when parsing PNG files

Impact Reader::readfromcontainer can cause an infinite loop when a crafted PNG file is given. Patches Version 0.5.3 includes the fix. Workarounds No workaround is available. Applications that do not pass files with the PNG signature to Reader::readfromcontainer are not affected. References For mo...

kamadak-exif vulnerable to Infinite loop when parsing PNG files

Impact Reader::readfromcontainer can cause an infinite loop when a crafted PNG file is given. Patches Version 0.5.3 includes the fix. Workarounds No workaround is available. Applications that do not pass files with the PNG signature to Reader::readfromcontainer are not affected. References For mo...

Security update for pngcheck (moderate)

openSUSE Security Update: Security update for pngcheck Announcement ID: openSUSE-SU-2022:10142-1 Rating: moderate References: 1202662 Cross-References: CVE-2020-35511 CVSS scores: CVE-2020-35511 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP...

OPENSUSE-SU-2022:10142-1 Security update for pngcheck

This update for pngcheck fixes the following issues: version update to 3.0.3 boo1202662 fixed a crash bug and probable vulnerability in large MNG LOOP chunks fixed a divide-by-zero crash bug and probable vulnerability in interlaced images with extra compressed data beyond the nominal end of the...