Lucene search
+L

1456 matches found

CNVD
CNVD
•added 2019/10/24 12:00 a.m.•59 views

X11 Mesa 3D Graphics Library Shared Memory Privilege Vulnerability

X11 Mesa 3D Graphics Library is a 3D graphics library. A shared memory privilege vulnerability exists in X11 Mesa 3D Graphics Library, which can be exploited by an attacker to access shared memory...

5.1CVSS5.7AI score0.00484EPSS
SaveExploits1References1
OSV
OSV
•added 2019/09/06 7:15 p.m.•10 views

UBUNTU-CVE-2019-11925

Insufficient boundary checks when processing the JPEG APP12 block marker in the GD extension could allow access to out-of-bounds memory via a maliciously constructed invalid JPEG input. This issue affects HHVM versions prior to 3.30.9, all versions between 4.0.0 and 4.8.3, all versions between...

9.8CVSS5.8AI score0.02084EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2019/08/19 8:42 a.m.•14 views

gd: Unsigned integer underflow _gdContributionsAlloc()

Integer underflow in the gdContributionsAlloc function in gdinterpolation.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to have unspecified impact via vectors related to decrementing the u variable...

9.8CVSS5.9AI score0.10687EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2019/08/19 8:42 a.m.•15 views

gd: Heap-based buffer overflow in gdImageColorMatch() in gd_color_match.c

gdImageColorMatch in gdcolormatch.c in the GD Graphics Library aka LibGD 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigg...

8.8CVSS7.7AI score0.71496EPSS
SaveExploits8References4
Positive Technologies
Positive Technologies
•added 2019/07/31 12:00 a.m.•3 views

PT-2019-17450

Name of the Vulnerable Software and Affected Versions X11 Mesa 3D Graphics Library version 19.1.2 Description A shared memory permissions issue exists, allowing an attacker to access shared memory without specific permissions, potentially triggering the vulnerability. Recommendations For X11 Mesa...

5.1CVSS0.00484EPSS
SaveExploits1References47
Tenable Nessus
Tenable Nessus
•added 2019/07/22 12:00 a.m.•53 views

EulerOS 2.0 SP2 : gd (EulerOS-SA-2019-1715)

According to the version of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The GD Graphics Library aka LibGD 2.2.5 has a double free in the gdImagePtr functions in gdgifout.c, gdjpeg.c, and gdwbmp.c. NOTE: PHP is...

9.8CVSS7.1AI score0.04452EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/06/24 12:00 a.m.•15 views

GD Graphics Library Double Release Vulnerability

GD Graphics Library libgd or libgd2 is an open source library for dynamically creating images. It supports the creation of charts, graphs, thumbnails and more. A security vulnerability exists in the 'gdImageBmpPt' parameter in GD Graphics Library version 2.2.5 and earlier. The vulnerability...

6.9AI score
SaveExploits0References1
NVD
NVD
•added 2019/06/19 12:15 a.m.•29 views

CVE-2019-11038

When using the gdImageCreateFromXbm function in the GD Graphics Library aka LibGD 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized...

5.3CVSS5.4AI score0.04332EPSS
SaveExploits1References18
OSV
OSV
•added 2019/06/19 12:15 a.m.•14 views

UBUNTU-CVE-2019-11038

When using the gdImageCreateFromXbm function in the GD Graphics Library aka LibGD 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized...

5.3CVSS6AI score0.04332EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
•added 2019/06/18 11:28 p.m.•70 views

CVE-2019-11038

When using the gdImageCreateFromXbm function in the GD Graphics Library aka LibGD 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized...

5.3CVSS6AI score0.04332EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2019/06/18 11:28 p.m.•88 views

CVE-2019-11038

When using the gdImageCreateFromXbm function in the GD Graphics Library aka LibGD 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6, it is possible to supply data that will cause the function to use the value of uninitialized...

5.3CVSS6AI score0.04332EPSS
SaveExploits1
OSV
OSV
•added 2019/05/21 12:00 a.m.•13 views

UBUNTU-CVE-2019-11693

The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. Note: this issue only occurs on Linux. Other operating systems are unaffected.. This...

9.8CVSS7.6AI score0.02408EPSS
SaveExploits0References6
OSV
OSV
•added 2019/05/20 5:29 p.m.•6 views

DEBIAN-CVE-2019-12219

An issue was discovered in libSDL2.a in Simple DirectMedia Layer SDL 2.0.9 when used in conjunction with libSDL2image.a in SDL2image 2.0.4. There is an invalid free error in the SDL function SDLSetErrorREAL at SDLerror.c...

8.8CVSS7.7AI score0.02001EPSS
SaveExploits1References1
Veracode
Veracode
•added 2019/05/16 3:00 a.m.•32 views

Denial Of Service (DoS) Through Infinite Loop

PHP is vulnerable to denial-of-service attacks. A remote unauthenticated attacker could cause denial of Service via infinite loop in imagecreatefromgif/imagecreatefromstring function in ext/gd/libgd/gdgifin.c. The affected component is GD Graphics Library...

5.5CVSS6.4AI score0.13204EPSS
SaveExploits1References13Affected Software3
Veracode
Veracode
•added 2019/05/16 2:59 a.m.•32 views

Information Disclosure

PHP is vulnerable to information disclosure vulnerability. The vulnerability exists in gdImageCreateFromGifCtx in GD Graphics Library used in PHP. An attacker could use a specially crafted GIF image and read up to 762 bytes from stack...

6.5CVSS7.9AI score0.03418EPSS
SaveExploits0References12Affected Software2
Veracode
Veracode
•added 2019/05/16 2:59 a.m.•33 views

Denial Of Service (DoS) Through Memory Corruption

PHP is vulnerable to denial of serviceDoS attacks. This occurs in the gdImageFillToBorder function in gd.c in the GD Graphics Library when passing a negative integer as the color parameter. A remote attacker could force a negative color identifier when calling the function which may crash the PHP...

7.5CVSS8.2AI score0.06871EPSS
SaveExploits0References17Affected Software1
OpenVAS
OpenVAS
•added 2019/05/07 12:00 a.m.•94 views

Fedora Update for cairo FEDORA-2018-3a195026f5

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS6.8AI score0.01714EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/05/05 12:00 a.m.•3 views

PT-2019-5039

Name of the Vulnerable Software and Affected Versions GD Graphics Library versions 2.2.5 PHP versions 7.1.x through 7.1.29 PHP versions 7.2.x through 7.2.18 PHP versions 7.3.x through 7.3.5 Description The issue is related to the gdImageCreateFromXbm function in the GD Graphics Library, which is...

7.8CVSS0.04332EPSS
SaveExploits1References99
Veracode
Veracode
•added 2019/05/02 6:37 a.m.•25 views

Denial Of Service (DoS)

Mozilla Thunderbird is vulnerable to buffer overflow vulnerability. This occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. An incorrect value being passed within the library during checks and results in a potentially exploitable crash...

9.8CVSS9.4AI score0.03595EPSS
SaveExploits0References14Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/04/17 12:00 a.m.•10 views

The vulnerability of the Skia graphic library in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Skia graphic library in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to buffer overflow in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

10CVSS8AI score0.04975EPSS
SaveExploits0References7Affected Software3
Rows per page
Query Builder