350 matches found
CVE-2020-11761
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refill in ImfFastHuf.cpp...
PT-2020-6220 · Industrial Light & Magic +7 · Openexr +7
Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 2.4.1 Description: The issue is related to an out-of-bounds read during Huffman uncompression. This can be demonstrated by the FastHufDecoder::refill function in ImfFastHuf.cpp. The exploitation of this issue may all...
PT-2020-6981 · Libraw +3 · Libraw +3
Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to an out-of-bounds read vulnerability within the get huffman diff function in the librawsrcx3fx3f utils patched.cpp component of the LibRaw library for image processing...
ImageMagick: memory leak in Huffman2DEncodeImage in coders/ps2.c
A memory leak was discovered in ImageMagick in function Huffman2DEncodeImage in ps2.c. An application that uses ImageMagick to parse PS2 images may be vulnerable to this flaw and crash due to some memory that is never freed...
openSUSE Security Update : nghttp2 (openSUSE-2020-379)
This update for nghttp2 fixes the following issues : nghttp2 was update to version 1.40.0 bsc1166481 - lib: Add nghttp2checkauthority as public API - lib: Fix the bug that stream is closed with wrong error code - lib: Faster huffman encoding and decoding - build: Avoid filename collision of stati...
DEBIAN-CVE-2020-10938
GraphicsMagick before 1.3.35 has an integer overflow and resultant heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c...
UBUNTU-CVE-2020-10938
GraphicsMagick before 1.3.35 has an integer overflow and resultant heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c...
SUSE SLED15 / SLES15 Security Update : nghttp2 (SUSE-SU-2020:0722-1)
This update for nghttp2 fixes the following issues : nghttp2 was update to version 1.40.0 bsc1166481 lib: Add nghttp2checkauthority as public API lib: Fix the bug that stream is closed with wrong error code lib: Faster huffman encoding and decoding build: Avoid filename collision of static and...
SUSE-SU-2020:0722-1 Security update for nghttp2
This update for nghttp2 fixes the following issues: nghttp2 was update to version 1.40.0 bsc1166481 - lib: Add nghttp2checkauthority as public API - lib: Fix the bug that stream is closed with wrong error code - lib: Faster huffman encoding and decoding - build: Avoid filename collision of static...
Internet Bug Bounty: CVE-2020-10938-buffer overflow/out-of-bounds write in compress.c:HuffmanDecodeImage()
Hello, There is an out-of-bounds write that is likely exploitable while performing Huffman decoding of Fax images. The technical details are as follows. Type: integer underflow produces out of bounds heap/etc write Platform: 32-bit Details: 390 MagickExport MagickPassFail HuffmanDecodeImageImage...
UBUNTU-CVE-2019-17178
HuffmanTreemakeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other products, has a memory leak because a supplied realloc pointer i.e., the first argument to realloc is also used for a realloc return value...
UBUNTU-CVE-2019-16711
ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c...
PT-2019-14786 · Imagemagick +4 · Imagemagick +4
Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.8-40 Description: The issue is related to a memory leak in the Huffman2DEncodeImage function, located in the coders/ps2.c file. Recommendations: For ImageMagick version 7.0.8-40, consider updating to a newer version th...
PT-2019-14641 · FFmpeg · Ffjpeg
Name of the Vulnerable Software and Affected Versions: ffjpeg versions prior to 2019-08-18 Description: The issue is related to a NULL pointer dereference in the huffman decode step function at huffman.c. Recommendations: For versions prior to 2019-08-18, update to a version released after...
ALPINE-CVE-2019-9516
Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations allocate memory fo...
UBUNTU-CVE-2019-9516
Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations allocate memory fo...
ACD Systems Canvas Draw 5 huff table out-of-bounds write code execution vulnerability
Summary An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this...
Freeware Advanced Audio Coder Invalid Memory Address Dereference Vulnerability (CNVD-2019-05830)
Freeware Advanced Audio Coder FAAC is a software program that contains the AAC encoder FAAC and the decoder FAAD2. An invalid memory address dereference vulnerability exists in the huffcode function in libfaac/huff2.c in Freeware Advanced Audio Coder FAAC 1.29.9.2, which can be exploited by an...
