Security update for vlc (moderate)

openSUSE Security Update: Security update for vlc Announcement ID: openSUSE-SU-2020:0562-1 Rating: moderate References: 1142161 1146428 Cross-References: CVE-2019-13602 CVE-2019-13962 CVE-2019-14437 CVE-2019-14438 CVE-2019-14498 CVE-2019-14533 CVE-2019-14534 CVE-2019-14535 CVE-2019-14776...

openSUSE Security Update : vlc (openSUSE-2020-545)

This update for vlc fixes the following issues : vlc was updated to version 3.0.9.2 : + Misc: Properly bump the version in configure.ac. Changes from version 3.0.9.1 : + Misc: Fix VLSub returning 401 for earch request. Changes from version 3.0.9 : + Core: Work around busy looping when playing an...

Industrial Light and Magic OpenEXR Out-of-Bounds Read Vulnerability (CNVD-2020-24151)

Industrial Light and Magic LIM OpenEXR is an image file format from Industrial Light and Magic LIM, USA, for high dynamic range HDR images. An out-of-bounds read vulnerability exists in the ImfOptimizedPixelReading.h file in LIM OpenEXR versions prior to 2.4.1, which can be exploited by an attack...

UBUNTU-CVE-2019-20016

libmysofa before 2019-11-24 does not properly restrict recursive function calls, as demonstrated by reports of stack consumption in readOHDRHeaderMessageDatatype in dataobject.c and directblockRead in fractalhead.c. NOTE: a download of v0.9 after 2019-12-06 should fully remediate this issue...

The vulnerability of the RADIANCE module, a software component used for creating 3D computer graphics in Blender, arises from integer overflow. This allows an attacker to execute arbitrary code.

The vulnerability of the RADIANCE module in the software suite used to create 3D computer graphics in Blender is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created HDR file...

PT-2019-5861 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-68 Description: The issue is related to an integer overflow in the coders/hdr.c component of the ImageMagick console graphic editor. Exploitation of this issue allows a remote attacker to cause a denial of...

September 26, 2019—KB4517211 (OS Build 18362.387)

None None...

CVE-2019-16138

An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::setlen is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution...

CVE-2019-16138

An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::setlen is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution...

CVE-2019-16138

An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::setlen is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution...

Format string

An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::setlen is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution...

CVE-2019-16138

An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::setlen is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution...

CVE-2019-16138

An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::setlen is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution...

CVE-2019-16138

CVE-2019-16138 affects the Rust image crate, specifically the HDR image format decoder, where Vec::set_len is invoked on an uninitialized vector, causing a use-after-free and potential arbitrary code execution. The issue impacts the image crate prior to version 0.21.3. According to the connected ...

CVE-2019-16138: Use After Free

An issue was discovered in the image crate before 0.21.3 for Rust, affecting the HDR image format decoder. Vec::setlen is called on an uninitialized vector, leading to a use-after-free and arbitrary code execution...

Security update for vlc (important)

openSUSE Security Update: Security update for vlc Announcement ID: openSUSE-SU-2019:2015-1 Rating: important References: 1093732 1094893 1118586 1133290 1138354 1138933 1141522 1142161 1143547 1143549 Cross-References: CVE-2018-19857 CVE-2019-12874 CVE-2019-13602 CVE-2019-13962 CVE-2019-5439...

PT-2019-14534

Name of the Vulnerable Software and Affected Versions image crate versions prior to 0.21.3 image crate versions prior to 0.22 Description An issue was discovered in the HDR image format decoder, where Vec::set len is called on an uninitialized vector. This leads to a use-after-free and allows for...

Security update for vlc (important)

openSUSE Security Update: Security update for vlc Announcement ID: openSUSE-SU-2019:1909-1 Rating: important References: 1093732 1094893 1118586 1133290 1138354 1138933 1141522 1142161 1143547 1143549 Cross-References: CVE-2018-19857 CVE-2019-12874 CVE-2019-13602 CVE-2019-13962 CVE-2019-5439...

PT-2019-6457

Name of the Vulnerable Software and Affected Versions Lustre file system versions prior to 2.12.3 Description The issue is related to an out-of-bounds read and panic in the ptlrpc module of the Lustre file system. This occurs due to the lack of validation for specific fields of packets sent by a...

CVE-2019-2033

In createhdr of dnssdclientstub.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-121327565...