CVE-2021-21458

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

The vulnerability of the realloc function in the Pillow image processing library allows a malicious actor to cause a service failure.

The vulnerability of the realloc function in the Pillow image processing library libImaging/TiffDecode.c is due to a numerical overflow during the processing of TIFF images. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Victor CMS 1.0 - File Upload To RCE

Exploit Title: Victor CMS 1.0 - File Upload To RCE Date: 20.12.2020 Exploit Author: Mosaaed Vendor Homepage: https://github.com/VictorAlagwu/CMSsite Software Link: https://github.com/VictorAlagwu/CMSsite/archive/master.zip Version: 1.0 Tested on: Apache2/Linux Step1: register...

ImageMagick6 -- multiple vulnerabilities

CVE reports: Several vulnerabilities have been discovered in ImageMagick: CVE-2021-20309: A flaw was found in ImageMagick in versions before 6.9.12, where a division by zero in WaveImage of MagickCore/visual-effects.c may trigger undefined behavior via a crafted image file submitted to an...

About the security content of tvOS 14.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

Industrial Light and Magic Academy Software Foundation OpenEXR code issue vulnerability

Industrial Light and Magic Academy Software Foundation OpenEXR is an image file format from Industrial Light and Magic for High Dynamic Range HDR images.A code issue vulnerability exists in Industrial Light and Magic Academy Software Foundation OpenEXR, which stems from A null pointer compliance...

Industrial Light And Magic Academy Software Foundation OpenEXR Buffer Overflow Vulnerability (CNVD-2022-19857)

Industrial Light And Magic Academy Software Foundation OpenEXR is an image file format for high dynamic range HDR images. industrial Light And Magic Academy Software Foundation A buffer overflow vulnerability exists in OpenEXR, which can be exploited by remote attackers to submit special file...

DEBIAN-CVE-2020-16587

A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of service via a crafted EXR file...

Industrial Light And Magic OpenEXR 代码问题漏洞

Industrial Light and Magic Academy Software Foundation OpenEXR is an image file format from Industrial Light and Magic for High Dynamic Range HDR images.A code issue vulnerability exists in Industrial Light and Magic Academy Software Foundation OpenEXR, which stems from A null pointer compliance...

Denial Of Service (DoS)

OptiPNG is vulnerable to denial of service. An attacker may cause a denial of service out-of-bounds read or write access and crash or possibly execute arbitrary code via a crafted image file, which triggers a heap-based buffer overflow...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. A memory leak in the function SVGKeyValuePairs in coders/svg.c allows an attacker to cause a denial of service via a malicious image file...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service. The vulnerability existed because of an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service CPU exhaustion via a crafted psd image file...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service attacks.Not checking the return value of the fputc function allows Remote attackers to cause a denial of service conditions via a crafted image file...

Binary vulnerability in FFmpeg tiff format

FFmpeg is a set of open source computer programs that can be used to record and convert digital audio and video into streams. A binary vulnerability exists in the FFmpeg tiff format, which can be exploited by attackers to cause a denial-of-service attack...

Heap out-of-bounds read vulnerability exists in ABC Lookout of Shanghai Zhanmeng Network Technology Co. Ltd (CNVD-2020-66602)

ABC Viewer is a permanent free image viewing software, intelligently turns on hardware acceleration and supports a variety of image formats. Shanghai Zhanmeng Network Science and Technology Co., Ltd. ABC to see the map of the existence of heap out-of-bounds read vulnerability, the vulnerability f...

Heap out-of-bounds read vulnerability exists in ABC Lookout of Shanghai Zhanmeng Network Technology Co. Ltd (CNVD-2020-66605)

ABC Viewer is a permanent free image viewing software, intelligently turns on hardware acceleration and supports a variety of image formats. Shanghai Zhanmeng Network Science and Technology Co., Ltd. ABC to see the map of the existence of heap out-of-bounds read vulnerability, the vulnerability f...

Heap out-of-bounds read vulnerability exists in ABC Lookout of Shanghai Zhanmeng Network Technology Co. Ltd (CNVD-2020-66604)

ABC Viewer is a permanent free image viewing software, intelligently turns on hardware acceleration and supports a variety of image formats. Shanghai Zhanmeng Network Science and Technology Co., Ltd. ABC to see the map of the existence of heap out-of-bounds read vulnerability, the vulnerability f...

About the security content of tvOS 14.2

About the security content of tvOS 14.2 This document describes the security content of tvOS 14.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Apple macOS Catalina buffer overflow vulnerability (CNVD-2020-60824)

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Catalina versions prior to 10.15.6, which originates from viewing a maliciously created JPEG file could lead to arbitrary code execution. No details of...

Foxit Studio Photo Remote Code Execution Vulnerability (CNVD-2020-59779)

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A remote code execution vulnerability exists in the handling of CR2 files in Foxit Studio Photo 3.6.6.930 and earlier versions. The vulnerability stems from a lack of proper validation of user-supplied dat...