Lucene search
+L

47 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 10:12 a.m.8 views

CVE-2024-22526

Buffer Overflow vulnerability in bandisoft bandiview v7.0, allows local attackers to cause a denial of service DoS via exr image file...

5.5CVSS6.7AI score0.00407EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/12 7:15 a.m.14 views

CVE-2024-22526

Buffer Overflow vulnerability in bandisoft bandiview v7.0, allows local attackers to cause a denial of service DoS via exr image file...

5.5CVSS6.3AI score0.00407EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/12 12:00 a.m.61 views

CVE-2024-22526

Bandisoft Bandiview 7.0 is affected by CVE-2024-22526 due to a buffer overflow in EXR image handling, enabling a local attacker with low privileges and no user interaction to cause a DoS. The CVSS metrics indicate a local attack vector with a high impact on availability and no impact on confident...

5.5CVSS6.5AI score0.00407EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/04/12 12:00 a.m.27 views

CVE-2024-22526

Buffer Overflow vulnerability in bandisoft bandiview v7.0, allows local attackers to cause a denial of service DoS via exr image file...

6.5AI score0.00407EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/12 12:00 a.m.13 views

CVE-2024-22526

Buffer Overflow vulnerability in bandisoft bandiview v7.0, allows local attackers to cause a denial of service DoS via exr image file...

6.8AI score0.00407EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/12 12:00 a.m.5 views

Bandisoft bandiview 安全漏洞

Bandisoft bandiview is an image viewer and editor software from the Korean company Bandisoft. A security vulnerability exists in Bandisoft bandiview version v7.0, which originates from the presence of a buffer overflow vulnerability that could allow a local attacker to cause a denial of service D...

5.5CVSS6.7AI score0.00407EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/20 6:15 a.m.10 views

CVE-2024-28563

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to cause a denial of service DoS via the Imf22::DwaCompressor::Classifier::Classifier function when reading images in EXR format...

5.9CVSS5.6AI score
SaveExploits0References4
OSV
OSV
added 2024/03/20 6:15 a.m.11 views

UBUNTU-CVE-2024-28569

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the Imf22::Xdr::read function when reading images in EXR format...

7.8CVSS6.2AI score0.00343EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/03/20 12:00 a.m.9 views

FreeImage Security Vulnerability

FreeImage is a cross-platform open source library for supporting popular graphic image formats. A security vulnerability exists in FreeImage version v.3.19.0, which stems from the presence of a buffer overflow vulnerability. A local attacker can exploit this vulnerability to cause a denial of...

5.9CVSS6.8AI score0.0046EPSS
SaveExploits1References2
Zero Day Initiative
Zero Day Initiative
added 2023/08/25 12:00 a.m.27 views

Apple macOS EXR Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ImageIO framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS6.2AI score0.00247EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.18 views

The vulnerability of the DwaCompressor::Classifier::Classifier function in software for storing images with wide dynamic range brightness in OpenEXR, related to a single offset error, allows attackers to cause service interruptions.

The vulnerability of the DwaCompressor::Classifier::Classifier function in software for storing images with wide dynamic range brightness in OpenEXR is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause service failures...

6.5CVSS6.7AI score0.01702EPSS
SaveExploits1References11Affected Software3
ArchLinux
ArchLinux
added 2021/07/06 12:00 a.m.202 views

[ASA-202107-14] openexr: arbitrary code execution

Arch Linux Security Advisory ASA-202107-14 ========================================== Severity: Medium Date : 2021-07-06 CVE-ID : CVE-2021-3598 Package : openexr Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2071 Summary ======= The package openexr before...

5.5CVSS2.1AI score0.00428EPSS
SaveExploits1References6
Ubuntu
Ubuntu
added 2021/04/01 5:33 p.m.122 views

USN-4900-1: OpenEXR vulnerabilities

It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code...

5.5CVSS6.4AI score0.01848EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/08/31 12:00 a.m.53 views

Debian DLA-2358-1 : openexr security update

Multiple security issues were found in the OpenEXR image library, which could result in denial of service and potentially the execution of arbitrary code when processing malformed EXR image files. For Debian 9 stretch, these problems have been fixed in version 2.2.0-11+deb9u1. We recommend that y...

8.8CVSS7AI score0.0331EPSS
SaveExploits9References21
OSV
OSV
added 2020/07/06 6:22 p.m.6 views

USN-4418-1 openexr vulnerabilities

It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code...

5.5CVSS6.8AI score0.00464EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2020/04/28 12:00 a.m.51 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : OpenEXR vulnerabilities (USN-4339-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4339-1 advisory. Brandon Perry discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening ...

8.8CVSS7.1AI score0.0331EPSS
SaveExploits9References13
BDU FSTEC
BDU FSTEC
added 2017/05/15 12:00 a.m.13 views

The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure

The vulnerability of the ReadEXRImage function in the exr.c file of the ImageMagick console graphics editor is caused by the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure loss of access to...

4.3CVSS7.3AI score0.01935EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2016/07/22 2:59 a.m.27 views

CVE-2016-4630

ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted EXR image with B44 compression...

8.8CVSS9.1AI score0.03576EPSS
SaveExploits2References6
OSV
OSV
added 2016/07/22 2:59 a.m.6 views

CVE-2016-4629

ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted xStride and yStride values in an EXR image...

9.8CVSS7.6AI score0.07418EPSS
SaveExploits2References6
NVD
NVD
added 2016/07/22 2:59 a.m.23 views

CVE-2016-4629

ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted xStride and yStride values in an EXR image...

10CVSS9.4AI score0.07418EPSS
SaveExploits2References6
Rows per page
Query Builder