CVE-2022-43359

Gifdec commit 1dcbae19363597314f6623010cc80abad4e47f7c was discovered to contain an out-of-bounds read in the function readimagedata. This vulnerability is triggered when parsing a crafted Gif file...

Out-of-bounds

Gifdec commit 1dcbae19363597314f6623010cc80abad4e47f7c was discovered to contain an out-of-bounds read in the function readimagedata. This vulnerability is triggered when parsing a crafted Gif file...

GIF decoder 缓冲区错误漏洞

GIF decoder is a small C library that can be used to read GIF files by the personal developer Marcel Rodrigues. A security vulnerability exists in GIF decoder due to an out-of-bounds readimagedata when parsing a carefully crafted Gif file provided by an attacker...

CVE-2022-43359

CVE-2022-43359 : Gifdec contains an out-of-bounds read in the function read_image_data when parsing a crafted GIF file. Affected commit: 1dcbae19363597314f6623010cc80abad4e47f7c. Impact (per CVSS): HIGH for confidentiality, integrity, and availability; attack vector LOCAL, attack complexity LOW, ...

PT-2022-26867 · Gifdec · Gifdec

Name of the Vulnerable Software and Affected Versions: Gifdec version 1dcbae19363597314f6623010cc80abad4e47f7c Description: The issue is related to an out-of-bounds read in the read image data function. This problem occurs when the software attempts to parse a specially crafted Gif file...

CVE-2022-43359

Gifdec commit 1dcbae19363597314f6623010cc80abad4e47f7c was discovered to contain an out-of-bounds read in the function readimagedata. This vulnerability is triggered when parsing a crafted Gif file...

Updated gdk-pixbuf2.0 packages fix security vulnerability

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12. CVE-2021-44648...

MGASA-2022-0402 Updated gdk-pixbuf2.0 packages fix security vulnerability

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12. CVE-2021-44648...

(0Day) Corel CorelDRAW Graphics Suite GIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

(0Day) Corel CorelDRAW Graphics Suite GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-33889

A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated heap buffer. This vulnerability could lead to arbitrary code execution...

CVE-2022-33889

A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated heap buffer. This vulnerability could lead to arbitrary code execution...

CVE-2022-33889

A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated heap buffer. This vulnerability could lead to arbitrary code execution...

CVE-2022-33889

CVE-2022-33889 affects Autodesk Design Review 2018 and AutoCAD 2022–2023. The issue is a heap-buffer overflow when parsing malicious GIF/JPEG files, enabling arbitrary code execution. The Red Hat/NVD entries and security bulletins reference the same vulnerability across products; Autodesk advisor...

PT-2022-21890 · Autodesk · Autocad +1

Name of the Vulnerable Software and Affected Versions: Autodesk Design Review version 2018 AutoCAD versions 2022 through 2023 Description: A maliciously crafted GIF or JPEG file can be used to write beyond the allocated heap buffer when parsed through the affected software, potentially leading to...

Denial Of Service (DoS)

github.com/mattermost/mattermost-server is vulnerable to denial of service. The vulnerability exists in multiple functions in gif.go due to resource exhaustion in gif file which allows an attacker to cause an application crash via a malicious input...

Mattermost Denial of Service Vulnerability (CNVD-2022-67044)

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a denial of service vulnerability that arises from insufficient processing of specially crafted GIF files when uploaded, which can be exploited by an authenticated attacker to...

Mattermost subject to Denial of Service via upload of special GIF

Mattermost version 7.1.x and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to cause resource exhaustion while processing the file, resulting in server-side Denial of Service...

GHSA-M7W4-Q5VG-5XFP Mattermost subject to Denial of Service via upload of special GIF

Mattermost version 7.1.x and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to cause resource exhaustion while processing the file, resulting in server-side Denial of Service...

CVE-2022-3257

Mattermost version 7.1.x and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to cause resource exhaustion while processing the file, resulting in server-side Denial of Service...