520 matches found
CVE-2026-91802
A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target buffer formats. Successful exploitation could result in an application crash...
CVE-2026-91808
A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression metadata. Insufficient validation during image decoding may result in an undersized buffer and an out-of-bounds read during rendering, causing an applicati...
EUVD-2026-85120
A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader’s WebP image decoding due to improper handling of bitmap stride and target buffer formats. Successful exploitation could result in an application crash...
CVE-2026-91802
A heap-based out-of-bounds write vulnerability exists in Foxit PDF Editor/Reader within its WebP image decoding functionality. The vulnerability is caused by the improper handling of bitmap stride and target buffer formats , which could lead to an application crash if successfully exploited. No s...
EUVD-2026-85165
A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader’s handling of PDF image objects with inconsistent compression metadata. Insufficient validation during image decoding may result in an undersized buffer and an out-of-bounds read during rendering, causing an applicati...
CVE-2026-91808
A heap-based out-of-bounds read vulnerability exists in Foxit PDF Editor Reader during the handling of PDF image objects with inconsistent compression metadata. The issue stems from insufficient validation during image decoding, which can result in an undersized buffer . This vulnerability leads ...
webp_Android10_r33_CVE-2023-1999
root@kitploit: / \/ / / / \ \ / / \ / \//// / / / \ \ / / / / / / / \ \ / \ /////v1.0.2 Descripción: Códec WebP: biblioteca para codificar y decodificar imágenes en formato WebP. Este paquete contiene la biblioteca que se puede usar en otros programas para añadir soporte WebP, así como...
CVE-2026-84451
libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, the no-icef full-item branch of uncdecoder::getcompressedimagedatauncompressed in libheif/codecs/uncompressed/uncdecoder.cc retains an addition-based range check that can wrap when a crafted uncompressed tile gr...
CVE-2026-15814
Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to limit the amount of memory allocated when decoding uploaded image files which allows an authenticated user to cause excessive server memory consumption and potential denial of service via uploading a...
CVE-2026-15814 Uploading a crafted image causes excessive memory allocation in the Mattermost Server
Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to limit the amount of memory allocated when decoding uploaded image files which allows an authenticated user to cause excessive server memory consumption and potential denial of service via uploading a...
EUVD-2026-77369
Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to limit the amount of memory allocated when decoding uploaded image files which allows an authenticated user to cause excessive server memory consumption and potential denial of service via uploading a...
CVE-2026-15814 Uploading a crafted image causes excessive memory allocation in the Mattermost Server
Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to limit the amount of memory allocated when decoding uploaded image files which allows an authenticated user to cause excessive server memory consumption and potential denial of service via uploading a...
CVE-2026-15814
Mattermost Server versions 11.9.x ≤ 11.9.0, 11.8.x ≤ 11.8.4, 11.7.x ≤ 11.7.7, and 10.11.x ≤ 10.11.22 fail to limit the amount of memory allocated when decoding uploaded image files. An authenticated user can cause excessive server memory consumption and potential denial of service by uploading a ...
PT-2026-91146
Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to limit the amount of memory allocated when decoding uploaded image files which allows an authenticated user to cause excessive server memory consumption and potential denial of service via uploading a...
GO-2026-6359 Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling in github.com/axllent/mailpit
Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling in github.com/axllent/mailpit...
Orthanc DICOM Server
ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an authenticated remote attacker to write past the end of a heap allocation when Orthanc decodes an attacker-supplied PNG or JPEG image, resulting in a crash of the Orthanc process and a denial-of-service condition. 2...
SUSE CVE-2026-33582
Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. A crafted TIFF image could trigger excessive memory allocation during image decoding, allowing an authenticated user to cause the server process to crash. Users are...
Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling
Summary Mailpit's thumbnail endpoint decodes attacker-supplied image attachments into a full raster before checking any decoded-pixel, dimension, or memory budget. A remote client that can store an email and reach the default web API can supply a compact high-dimension image, then request...
GHSA-75MR-QW9X-3R39 Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling
Summary Mailpit's thumbnail endpoint decodes attacker-supplied image attachments into a full raster before checking any decoded-pixel, dimension, or memory budget. A remote client that can store an email and reach the default web API can supply a compact high-dimension image, then request...