CVE-2021-44340

David Brackeen ok-file-formats dev version is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurred in function okjpggeneratehuffmantable in "/okjpg.c:403"...

PT-2022-12046

Name of the Vulnerable Software and Affected Versions David Brackeen ok-file-formats dev version Description The issue is related to a Buffer Overflow vulnerability. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurs in the ok jpg generate huffman table functi...

ok-file-formats buffer error vulnerability

ok-file-formats is an open source decoder for PNG, JPEG, WAV, and several other file formats. A buffer error vulnerability exists in the dev version of ok-file-formats, which stems from a heap buffer overflow in the function okjpggeneratehuffmantable in "/ok jpg.c:403" when using functions from t...

stb:stbi_read_fuzzer: Heap-use-after-free in stbi__jpeg_huff_decode

Detailed Report: https://oss-fuzz.com/testcase?key=6483092183842816 Project: stb Fuzzing Engine: afl Fuzz Target: stbireadfuzzer Job Type: aflasanstb Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x629000255264 Crash State: stbijpeghuffdecode stbijpegdecodeblockprogac...

DEBIAN-CVE-2021-39516

An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function HuffmanDecoder::Get located in huffmandecoder.hpp. It allows an attacker to cause Denial of Service...

UBUNTU-CVE-2021-39516

An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function HuffmanDecoder::Get located in huffmandecoder.hpp. It allows an attacker to cause Denial of Service...

LibJpeg code-related vulnerabilities

libjpeg is a free library written entirely in C to handle the JPEG image data format. libjpeg 2020021 and earlier versions of huffmandecoder.hpp contain a null pointer dereference vulnerability in the HuffmanDecoder::Get function. An attacker can exploit this vulnerability to cause a denial of...

CVE-2021-28233

Heap-based Buffer Overflow vulnerability exists in ok-file-formats 1 via the okjpggeneratehuffmantable function in okjpg.c...

PT-2021-17826

Name of the Vulnerable Software and Affected Versions: ok-file-formats version 1 Description: A Heap-based Buffer Overflow issue exists via the ok jpg generate huffman table function in ok jpg.c. Recommendations: For ok-file-formats version 1, consider disabling the ok jpg generate huffman table...

simd:simd_load_fuzzer: Index-out-of-bounds in Simd::Base::jpeg__build_huffman

Project: https://github.com/ermig1979/Simd.git Detailed Report: https://oss-fuzz.com/testcase?key=6271414796681216 Project: simd Fuzzing Engine: libFuzzer Fuzz Target: simdloadfuzzer Job Type: libfuzzerubsansimd Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

Moderate: Red Hat Security Advisory: brotli security update

An update for brotli is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

brotli security update

An update is available for brotli. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Brotli is a generic-purpose lossless compression algorithm that compresses dat...

RLSA-2021:1702 Moderate: brotli security update

Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It...

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 19 security fixes, including: 1180126 High CVE-2021-30506: Incorrect security UI in Web App Installs. Reported by @retsew0x01 on 2021-02-19 1178202 High CVE-2021-30507: Inappropriate implementation in Offline. Reported by Alison Huffman, Microsoft...

libjbig2dec Heap Buffer Overflow DoS

The vulnerability of the jbig2huffmanget function in the libjbig2dec.a decompression library for JBIG2 image compression formats is related to an improper pointer dereferencing. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

NewStart CGSL CORE 5.04 / MAIN 5.04 : OpenEXR Multiple Vulnerabilities (NS-SA-2021-0031)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has OpenEXR packages installed that are affected by multiple vulnerabilities: - An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp...

Apple Issues Patch for Remote Hacking Bug Affecting Billions of its Devices

Apple has released out-of-band patches for iOS, macOS, watchOS, and Safari web browser to address a security flaw that could allow attackers to run arbitrary code on devices via malicious web content. Tracked as CVE-2021-1844, the vulnerability was discovered and reported to the company by Clémen...

openSUSE Security Update : nghttp2 (openSUSE-2021-341)

This update for nghttp2 fixes the following issues : nghttp2 was update to version 1.40.0 bsc1166481 - lib: Add nghttp2checkauthority as public API - lib: Fix the bug that stream is closed with wrong error code - lib: Faster huffman encoding and decoding - build: Avoid filename collision of stati...

OPENSUSE-SU-2021:0341-1 Security update for nghttp2

This update for nghttp2 fixes the following issues: nghttp2 was update to version 1.40.0 bsc1166481 - lib: Add nghttp2checkauthority as public API - lib: Fix the bug that stream is closed with wrong error code - lib: Faster huffman encoding and decoding - build: Avoid filename collision of static...

Security update for nghttp2 (moderate)

openSUSE Security Update: Security update for nghttp2 Announcement ID: openSUSE-SU-2021:0341-1 Rating: moderate References: 1159003 1166481 Cross-References: CVE-2019-18802 CVSS scores: CVE-2019-18802 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-18802 SUSE: 7.5...