Lucene search
+L

51 matches found

Debian CVE
Debian CVE
added 2024/03/20 12:0 a.m.40 views

CVE-2024-28562

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the Imf22::copyIntoFrameBuffer component when reading images in EXR format...

6.8CVSS6.9AI score0.00467EPSS
Exploits1
Debian CVE
Debian CVE
added 2024/03/20 12:0 a.m.14 views

CVE-2024-28564

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to cause a denial of service DoS via the Imf22::CharPtrIO::readChars function when reading images in EXR format...

6.2CVSS6.2AI score0.00459EPSS
Exploits1
Debian CVE
Debian CVE
added 2024/03/20 12:0 a.m.14 views

CVE-2024-28569

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the Imf22::Xdr::read function when reading images in EXR format...

7.8CVSS7.8AI score0.00343EPSS
Exploits1
Cvelist
Cvelist
added 2024/03/20 12:0 a.m.26 views

CVE-2024-28564

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to cause a denial of service DoS via the Imf22::CharPtrIO::readChars function when reading images in EXR format...

6.5AI score0.00459EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/03/20 12:0 a.m.6 views

FreeImage Security Vulnerability

FreeImage is a cross-platform open source library for supporting popular graphic image formats. A security vulnerability exists in FreeImage version v.3.19.0, which stems from the presence of a buffer overflow vulnerability. A local attacker can exploit this vulnerability to cause a Denial of...

6.2CVSS7AI score0.00459EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/03/19 12:0 a.m.9 views

PT-2024-22471 · Freeimage +1 · Freeimage +1

Name of the Vulnerable Software and Affected Versions: FreeImage version 3.19.0 Description: The issue allows a local attacker to execute arbitrary code via the Imf 2 2::Xdr::read function when reading images in EXR format. This is a Buffer Overflow vulnerability in the open source FreeImage...

7.8CVSS7.4AI score0.00343EPSS
Exploits1References12
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.7 views

The vulnerability of the DeepScanLineInputFile() function in software for storing images with wide dynamic range brightness in OpenEXR, related to memory usage after deallocation, allows a hacker to cause a service failure.

The vulnerability of the DeepScanLineInputFile function in software for storing images in OpenEXR format with a wide dynamic range of brightness levels is related to the use of memory areas after they are freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00417EPSS
Exploits0References10Affected Software3
OSV
OSV
added 2021/06/03 5:15 p.m.4 views

UBUNTU-CVE-2021-33815

dwauncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dccount is not strictly checked...

8.8CVSS7.3AI score0.01356EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/03/30 12:0 a.m.6 views

LIM OpenEXR 输入验证错误漏洞

Industrial Light And Magic LIM OpenEXR is an image file format from Industrial Light and Magic LIM, USA, for high dynamic range HDR images. An input validation error vulnerability exists in OpenEXR B44 uncompression, which can be exploited by an attacker to trigger a shift overflow and potentiall...

5.3CVSS5.9AI score0.01848EPSS
Exploits0References14
OSV
OSV
added 2021/01/04 2:15 a.m.3 views

UBUNTU-CVE-2020-35965

decodeframe in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...

7.5CVSS6.9AI score0.02263EPSS
Exploits1References7
BDU FSTEC
BDU FSTEC
added 2016/09/19 12:0 a.m.7 views

The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the ImageIO service in the Mac OS X operating system arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption by using the specially crafted xStride and yStride values in the E...

10CVSS8.6AI score0.07418EPSS
Exploits2References4Affected Software1
Rows per page
Query Builder