PT-2021-22754 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 13.7 and later Description: A potential DOS issue was discovered in GitLab CE/EE. The stripping of EXIF data from certain images resulted in high CPU usage. Recommendations: For GitLab CE/EE versions 13.7 and later,...

django-leaflet-storage (0.8.0b0), heatmappy (>=0.2.0, <=0.2.6) +3 more potentially affected by CVE-2020-5312 via pillow (3.0.0)

pillow PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - django-leaflet-storage 0.8.0b0 - heatmappy =0.2.0, =0.1.4, =0.1.14 - swmmio 0.2.1 - wsy-captcha 1.0.0 Source cves: CVE-2020-5312 Source advisory:...

Image-Processing Resource Management Error Vulnerability

Image-Processing is an image processing code repository that uses C. abhijitnathwani image-processing v0.1.0 contains a security vulnerability that stems from a problem with how the software handles image file sizes, which could be exploited by an attacker to cause a denial of service via a craft...

CVE-2020-21573

An issue was discoverered in in abhijitnathwani image-processing v0.1.0, allows local attackers to cause a denial of service via a crafted image file...

CVE-2020-21573

An issue was discoverered in in abhijitnathwani image-processing v0.1.0, allows local attackers to cause a denial of service via a crafted image file...

Design/Logic Flaw

An issue was discoverered in in abhijitnathwani image-processing v0.1.0, allows local attackers to cause a denial of service via a crafted image file...

CVE-2020-21573

CVE-2020-21573 affects the project abhijitnathwani image-processing v0.1.0. Multiple connected records describe a vulnerability in how the software handles image file sizes, enabling a local attacker to cause a denial of service via a crafted image file. The root cause is stated broadly as a proc...

CVE-2020-21573: Uncontrolled Resource Consumption

An issue was discoverered in in abhijitnathwani image-processing v0.1.0, allows local attackers to cause a denial of service via a crafted image file...

PT-2021-10641

Name of the Vulnerable Software and Affected Versions: abhijitnathwani image-processing version 0.1.0 Description: The issue allows local attackers to cause a denial of service via a crafted image file. Recommendations: For abhijitnathwani image-processing version 0.1.0, consider avoiding the use...

Image-processing resource management error vulnerability

Image-Processing is an image processing code repository that uses C. abhijitnathwani image-processing v0.1.0 contains a security vulnerability that stems from a problem with how the software handles image file sizes, which could be exploited by an attacker to cause a denial of service via a craft...

Leptonica pixFewColorsOctcubeQuantMixed DoS

The vulnerability of the pixFewColorsOctcubeQuantMixed component in the Leptonica image processing library relates to reading data from buffers within acceptable limits. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2021-22564

For certain valid JPEG XL images with a size slightly larger than an integer number of groups 256x256 pixels when processing the groups out of order the decoder can perform an out of bounds copy of image pixels from an image buffer in the heap to another. This copy can occur when processing the...

CVE-2021-22564

For certain valid JPEG XL images with a size slightly larger than an integer number of groups 256x256 pixels when processing the groups out of order the decoder can perform an out of bounds copy of image pixels from an image buffer in the heap to another. This copy can occur when processing the...

Design/Logic Flaw

For certain valid JPEG XL images with a size slightly larger than an integer number of groups 256x256 pixels when processing the groups out of order the decoder can perform an out of bounds copy of image pixels from an image buffer in the heap to another. This copy can occur when processing the...

PT-2021-15143

Name of the Vulnerable Software and Affected Versions libjxl versions prior to 0.6.0 Description The issue arises when processing certain valid JPEG XL images with a size slightly larger than an integer number of groups 256x256 pixels out of order. This can lead to an out of bounds copy of image...

CVE-2021-30814

A memory corruption issue was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-30814

A memory corruption issue was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-30814

A memory corruption issue was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted image may lead to arbitrary code execution...

CLSA-2021-1635439636 Fix of CVE: CVE-2017-6363, CVE-2021-40145

CVE-2021-40145: check for memory allocation errors processing GD2 images - CVE-2017-6363: make sure transparent index is within bounds of the palette...

Adobe Photoshop 2021 memory buffer out-of-bounds access vulnerability

Adobe Photoshop, or "PS" for short, is an image processing software developed and distributed by Adobe. Adobe Photoshop 2021 22.5.1 and earlier versions are vulnerable to a memory buffer out-of-bounds access vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...