Lucene search
+L

2729 matches found

EUVD
EUVD
added 2026/03/26 3:30 p.m.9 views

EUVD-2018-21690

AnyBurn 4.3 contains a local buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the image file name field. Attackers can paste a 10000-byte payload into the 'Image file name' parameter during the 'Copy disk to Image'...

6.9CVSS6AI score0.00183EPSS
SaveExploits1References4
NVD
NVD
added 2026/03/26 2:16 p.m.8 views

CVE-2018-25216

AnyBurn 4.3 contains a local buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the image file name field. Attackers can paste a 10000-byte payload into the 'Image file name' parameter during the 'Copy disk to Image'...

6.9CVSS0.00183EPSS
SaveExploits1References3
CVE
CVE
added 2026/03/26 1:24 p.m.14 views

CVE-2018-25216

CVE-2018-25216 affects AnyBurn 4.3 through a local buffer overflow in the image file name field during Copy disk to Image. A 10000-byte payload in the Image file name can crash the application, causing a denial of service via local access. Root cause: insufficient bound checking in handling image...

6.9CVSS6AI score0.00183EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2026/03/26 1:24 p.m.24 views

CVE-2018-25216 AnyBurn 4.3 Denial of Service Local Buffer Overflow

AnyBurn 4.3 contains a local buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the image file name field. Attackers can paste a 10000-byte payload into the 'Image file name' parameter during the 'Copy disk to Image'...

6.9CVSS0.00183EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/03/26 1:24 p.m.4 views

CVE-2018-25216

AnyBurn 4.3 contains a local buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the image file name field. Attackers can paste a 10000-byte payload into the 'Image file name' parameter during the 'Copy disk to Image'...

6.9CVSS6AI score0.00183EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/03/26 1:24 p.m.9 views

CVE-2018-25216 AnyBurn 4.3 Denial of Service Local Buffer Overflow

AnyBurn 4.3 contains a local buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the image file name field. Attackers can paste a 10000-byte payload into the 'Image file name' parameter during the 'Copy disk to Image'...

6.9CVSS6AI score0.00183EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/03/26 12:0 a.m.11 views

PT-2026-28253

AnyBurn 4.3 contains a local buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the image file name field. Attackers can paste a 10000-byte payload into the 'Image file name' parameter during the 'Copy disk to Image'...

6.9CVSS6.1AI score0.00183EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2026/03/26 12:0 a.m.10 views

Power AnyBurn 缓冲区错误漏洞

Power AnyBurn is a disc burning and image file processing tool developed by Power company. Version 4.3 of Power AnyBurn contains a buffer overflow vulnerability; this vulnerability stems from a buffer overflow in the Image file name field, which may lead to a denial-of-service attack...

6.9CVSS6AI score0.00183EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.10 views

PT-2026-28086

Name of the Vulnerable Software and Affected Versions LibTIFF affected versions not specified Description A specially designed TIFF file can trigger an out-of-memory error or excessive resource usage during image decoding. The issue arises from the image decoding process attempting to allocate up...

9.8CVSS6.3AI score0.32715EPSS
SaveExploits27References210
EUVD
EUVD
added 2026/03/24 3:30 p.m.8 views

EUVD-2026-14901

A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations,...

7.8CVSS6.1AI score0.00553EPSS
SaveExploits0References3
CVE
CVE
added 2026/03/24 2:42 p.m.140 views

CVE-2026-4775

The CVE-2026-4775 entry concerns the libtiff library. A signed integer overflow in putcontig8bitYCbCr44tile can be triggered by a specially crafted TIFF file, leading to an out-of-bounds heap write. Documented impact includes denial of service (crash) or arbitrary code execution. Affected details...

7.8CVSS6.1AI score0.00553EPSS
SaveExploits0References31Affected Software4
FreeBSD
FreeBSD
added 2026/03/24 12:0 a.m.13 views

(lib)tiff -- Integer Overflow or Wraparound

PrymEvol and Quang Luong reports: A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrec...

7.8CVSS6.1AI score0.00553EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/23 5:16 p.m.10 views

CVE-2026-30007

XnSoft NConvert 7.230 is vulnerable to Use-After-Free via a crafted .tiff file...

6.2CVSS0.00158EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2026/03/23 1:2 p.m.7 views

gimp: GIMP: Remote Code Execution via ICO File Parsing Vulnerability

A flaw was found in GIMP. This vulnerability, a heap-based buffer overflow, occurs during the parsing of ICO files. A remote attacker can exploit this by convincing a user to open a malicious file or visit a malicious web page, leading to arbitrary code execution. The issue is due to a lack of...

8.8CVSS7.5AI score0.01157EPSS
SaveExploits0References6
CVE
CVE
added 2026/03/23 12:0 a.m.13 views

CVE-2026-30007

XnSoft NConvert 7.230 is affected by CVE-2026-30007: a Use-After-Free in processing crafted TIFF files. According to the provided metrics, the impact is Availability: High; Confidentiality/Integrity: None; Attack vector: Local; Privileges required: None; User interaction: None; Base score 6.2 (Me...

6.2CVSS5.8AI score0.00158EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/23 12:0 a.m.8 views

PT-2026-27149

XnSoft NConvert 7.230 is vulnerable to Use-After-Free via a crafted .tiff file...

6.2CVSS5.8AI score0.00158EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/03/23 12:0 a.m.9 views

PT-2026-27148

XnSoft NConvert 7.230 is vulnerable to Stack Buffer Overrun via a crafted .tiff file...

6.2CVSS5.8AI score0.00158EPSS
SaveExploits1References3
CVE
CVE
added 2026/03/23 12:0 a.m.19 views

CVE-2026-30006

XnSoft NConvert 7.230 is affected by a vulnerability described as a Stack Buffer Overrun triggered by a crafted TIFF file. The issue relates to parsing TIFF data and can impact availability. The provided documents identify the affected product and the file type but do not disclose the exact root-...

6.2CVSS5.8AI score0.00158EPSS
SaveExploits1References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/03/19 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-4426

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper validation of a field pzlog2bs...

6.5CVSS5.9AI score0.00305EPSS
SaveExploits0References2
OSV
OSV
added 2026/03/19 12:0 a.m.11 views

ALSA-2026:5113 Important: gimp:2.8 security update

The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: GIMP:...

8.8CVSS7.1AI score0.04642EPSS
SaveExploits0References10
Rows per page
Query Builder