CVE-2020-35533

CVE-2020-35533 is an out-of-bounds read in LibRaw’s Adobe DNG decoding path: LibRaw::adobe_copy_pixel() in libraw/src/decoders/dng.cpp when reading image data. Public references (Debian DLA-3113, Ubuntu USN-5715-1, Amazon Linux ALAS2-2023-2234, etc.) tie CVE-2020-35533 to LibRaw and note that Lib...

CVE-2020-35533

In LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobecopypixel" function libraw\src\decoders\dng.cpp when reading data from the image file...

CVE-2020-35531

In LibRaw, an out-of-bounds read vulnerability exists within the gethuffmandiff function libraw\src\x3f\x3futilspatched.cpp when reading data from an image file...

CVE-2020-35531

In LibRaw, an out-of-bounds read vulnerability exists within the gethuffmandiff function libraw\src\x3f\x3futilspatched.cpp when reading data from an image file...

CVE-2020-35531

Mode C: CVE-2020-35531 is an out-of-bounds read in LibRaw’s get_huffman_diff() (libraw/src/x3f/x3f_utils_patched.cpp) when reading image data. Connected advisories confirm LibRaw involvement across multiple distributions and indicate the issue is tied to X3F parsing in LibRaw. Affected software: ...

CVE-2020-35531

In LibRaw, an out-of-bounds read vulnerability exists within the gethuffmandiff function libraw\src\x3f\x3futilspatched.cpp when reading data from an image file...

DEBIAN-CVE-2022-1355

A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting the memory, and causing a crash that leads to a denial of service...

UBUNTU-CVE-2022-1354

A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service...

LibTIFF 安全漏洞

LibTIFF is a library for reading and writing TIFF Tagged Image File Format files. The library contains a number of command-line tools for working with TIFF files.A security vulnerability exists in LibTIFF, which stems from a heap buffer overflow flaw found in the TIFFReadRawDataStriped function o...

CVE-2020-35533

A vulnerability was found in LibRaw. An out-of-bounds read vulnerability exists within the "LibRaw::adobecopypixel" function libraw\src\decoders\dng.cpp when reading data from the image file...

CVE-2020-35531

A vulnerability was found in LibRaw. An out-of-bounds read vulnerability exists within the gethuffmandiff function libraw\src\x3f\x3futilspatched.cpp when reading data from an image file...

CVE-2022-0284

A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker passes a specially crafted Tagged Image File Format TIFF image to convert it into a PICON file format. This issue can potentially lead to a...

The vulnerability of the PDF-XChange PDF document viewing and editing program, related to the occurrence of operations outside the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the PDF document viewing and editing software PDF-XChange lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created malicious JPG file...

CVE-2022-35239

The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an insufficient verification vulnerability when uploading files. If this vulnerability is exploited, arbitrary PHP code may be executed if a remote authenticated...

CVE-2022-35239

CVE-2022-35239 affects SolarView Compact SV-CPT-MC310 and SV-CPT-MC310F (versions

CVE-2022-35239

The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an insufficient verification vulnerability when uploading files. If this vulnerability is exploited, arbitrary PHP code may be executed if a remote authenticated...

UBUNTU-CVE-2022-34526

A stack overflow was discovered in the TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted TIFF file parsed by the "tiffsplit" or "tiffcrop" utilities...

PT-2022-18652 · Autodesk · Designreview.Exe

Name of the Vulnerable Software and Affected Versions: DesignReview.exe affected versions not specified Description: The issue arises when a maliciously crafted TIFF file is consumed through the DesignReview.exe application, causing it to read beyond allocated boundaries while parsing the TIFF...

Contec SolarView Compact 输入验证错误漏洞

Contec SolarView Compact is an application system from Contec Japan. which provides photovoltaic power measurement systems. Contec SolarView Compact suffers from an input validation error vulnerability that stems from insufficient input validation provided in the image file management page. An...

Fedora: Security Advisory for libtiff (FEDORA-2022-edf7301147)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...