CVE-2021-34440

GDI+ Information Disclosure Vulnerability...

chromium-browser: Out of bounds write in ANGLE

Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

CVE-2021-34498

Windows GDI Elevation of Privilege Vulnerability...

PT-2021-5647 · Microsoft · Gdi+ +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to insufficient protection of internal data in the GDI+ graphics library of Microsoft Windows operating systems. This can allow an attacker to gain unauthoriz...

The vulnerability of Google Chrome’s WebGL component, which allows a hacker to trigger a service failure

The vulnerability of Google Chrome’s WebGL component is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause a service failure through a specially created HTML page...

SUSE SLES11 Security Update : php53 (SUSE-SU-2019:14158-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2019:14158-1 advisory. - When using the gdImageCreateFromXbm function in the GD Graphics Library aka LibGD 2.2.5, as used in the PHP GD extension in PHP versions 7.1...

SUSE: Security Advisory (SUSE-SU-2013:0843-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-7338

Name of the Vulnerable Software and Affected Versions GD Graphics Library aka LibGD versions through 2.3.2 Description The issue is related to a double free in the gdImageGd2Ptr function in the gd gd2.c component of the GD Graphics Library. This can be exploited by a remote attacker to cause a...

Moderate: userspace graphics, xorg-x11, and mesa security, bug fix, and enhancement update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Mesa provides a 3D graphics API that is compatible with Open Graphics Library OpenGL. It also provides hardware-accelerated...

NewStart CGSL CORE 5.04 / MAIN 5.04 : gd Vulnerability (NS-SA-2021-0034)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has gd packages installed that are affected by a vulnerability: - Integer overflow in the gd2GetHeader function in gdgd2.c in the GD Graphics Library aka libgd before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, an...

The vulnerability of the WebGL component in the Thunderbird email client, as well as in browsers like Firefox and Firefox ESR, allows attackers to execute arbitrary code.

The vulnerability of the WebGL component in the Thunderbird email client, as well as in browsers like Firefox and Firefox ESR, is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

UBUNTU-CVE-2021-21233

Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

PT-2021-7364

Name of the Vulnerable Software and Affected Versions LibGD versions through 2.3.2 Description The issue is related to the read header tga function in the gd tga.c component of the LibGD graphics library. It involves reading beyond the valid boundaries of a data buffer. This can be exploited by a...

EulerOS 2.0 SP3 : mesa (EulerOS-SA-2021-1817)

According to the version of the mesa packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An exploitable shared memory permissions vulnerability exists in the functionality of X11 Mesa 3D Graphics Library 19.1.2. An attacker can access the...

Mozilla: Out of bound write due to lazy initialization

A WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out of bound write. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...

CVE-2021-31523

The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has capnetraw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency...

UBUNTU-CVE-2021-31523

The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has capnetraw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency...

MGASA-2021-0163 Updated firefox packages fix security vulnerabilities

Texture upload into an unbound backing buffer resulted in an out-of-bound read. CVE-2021-23981 Angle graphics library out of date. CVE-2021-4127 Internal network hosts could have been probed by a malicious webpage. CVE-2021-23982 Malicious extensions could have spoofed popup information...

Mozilla: Angle graphics library out of date

The Mozilla Foundation Security Advisory describes this issue as: An out of date graphics library Angle likely contained vulnerabilities that could potentially be exploited...

Mozilla: Angle graphics library out of date

The Mozilla Foundation Security Advisory describes this issue as: An out of date graphics library Angle likely contained vulnerabilities that could potentially be exploited...