892 matches found
CVE-2022-35434: Incorrect Comparison
jpeg-quantsmooth before commit 8879454 contained a floating point exception FPE via /jpeg-quantsmooth/jpegqs+0x4f5d6c...
PT-2022-22479
Name of the Vulnerable Software and Affected Versions JPEGDEC affected versions not specified Description A floating-point exception FPE issue was discovered in JPEGDEC, specifically in the DecodeJPEG function located at /src/jpeg.inl. This issue affects the JPEGDEC commit be4843c. Recommendation...
PT-2022-24300 · Xpdf · Xpdf
Name of the Vulnerable Software and Affected Versions: XPDF version ffaf11c Description: A floating point exception FPE was discovered in XPDF via the DCTStream::decodeImage function at /xpdf/Stream.cc. Recommendations: For XPDF version ffaf11c, consider applying a patch or fix to resolve the...
XPDF security vulnerabilities
XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF has a security vulnerability that originates from DCTStream::decodeImage in /xpdf/Stream.cc contains a floating point exception FPE...
CVE-2022-38230: Incorrect Comparison
XPDF commit ffaf11c was discovered to contain a floating point exception FPE via DCTStream::decodeImage at /xpdf/Stream.cc...
PT-2022-22821 · Unknown · Jpeg-Quantsmooth
Name of the Vulnerable Software and Affected Versions: jpeg-quantsmooth before commit 8879454 Description: The issue is related to a floating point exception FPE in jpeg-quantsmooth. This exception occurs via the /jpeg-quantsmooth/jpegqs+0x4f5d6c endpoint. Recommendations: For versions before...
JPEGDEC security vulnerability
JPEGDEC is a JPEG decoder optimized for Arduino by the individual developer Larry Bank. JPEGDEC has a security vulnerability that stems from a floating point exception in the TIFFSHORT module of the /src/jpeg.inl file...
PT-2022-23228
Name of the Vulnerable Software and Affected Versions fdkaac affected versions not specified Description A floating point exception FPE issue was discovered in fdkaac via the wav open function at /src/wav reader.c. Recommendations At the moment, there is no information about a newer version that...
CVE-2022-31650
In SoX 14.4.2, there is a floating-point exception in lsxaiffstartwrite in aiff.c in libsox.a...
CVE-2022-31650
In SoX 14.4.2, there is a floating-point exception in lsxaiffstartwrite in aiff.c in libsox.a...
CVE-2022-31650
In SoX 14.4.2, there is a floating-point exception in lsxaiffstartwrite in aiff.c in libsox.a...
Code injection
In SoX 14.4.2, there is a floating-point exception in lsxaiffstartwrite in aiff.c in libsox.a...
SoX input validation vulnerability
SoX is a set of open source audio processing tools. The product supports playing, converting and recording audio in multiple formats. A security vulnerability exists in SoX version 14.4.2, which stems from a floating point exception in lsxaiffstartwrite in aiff.c in libsox.a. The vulnerability is...
PT-2022-6490 · Sox +4 · Sox +4
Name of the Vulnerable Software and Affected Versions: SoX version 14.4.2 Description: The issue is related to a floating-point exception in the lsx aiffstartwrite function in aiff.c in libsox.a. This vulnerability is associated with insufficient comparison, which may allow a remote attacker to...
CVE-2022-31650
In SoX 14.4.2, there is a floating-point exception in lsxaiffstartwrite in aiff.c in libsox.a...
CVE-2022-31650: Incorrect Comparison
In SoX 14.4.2, there is a floating-point exception in lsxaiffstartwrite in aiff.c in libsox.a...
CVE-2022-31650
CVE-2022-31650 is a vulnerability in SoX 14.4.2 where a floating-point exception occurs in lsx_aiffstartwrite (aiff.c) of libsox.a. Multiple trusted sources (OpenSUSE/OpenSUSE advisory, Amazon Linux 2 ALAS advisory, Astra Linux bulletin, etc.) reference this exact flaw and note that it can lead t...
CVE-2022-31650
In SoX 14.4.2, there is a floating-point exception in lsxaiffstartwrite in aiff.c in libsox.a...
CVE-2022-31650
In SoX 14.4.2, there is a floating-point exception in lsxaiffstartwrite in aiff.c in libsox.a...
libsixel img2sixel Denial of Service Vulnerability
libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. libsixel img2sixel version 1.8.6 suffers from a denial of service vulnerability stemming from a floating-point exception error in ssixelencoderdoresize, encoder.c:633. A remo...