Lucene search
+L

272 matches found

Talos
Talos
•added 2018/10/31 12:00 a.m.•525 views

Simple DirectMedia Layer SDL2_Image do_layer_surface code execution vulnerability

Summary An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability. Tested...

8.8CVSS9AI score0.03479EPSS
SaveExploits1
CNVD
CNVD
•added 2018/08/30 12:00 a.m.•23 views

Open Whisper Signal Denial of Service Vulnerability

Signal is an encrypted instant messaging and voice calling software that supports iOS, Android, Debian-based distributions, macOS and Windows platforms. A denial of service vulnerability exists in Open Whisper Signal for iOS version 2.29.0 and earlier. The vulnerability stems from a failure of...

8.6CVSS6.4AI score0.01085EPSS
SaveExploits0References1
Prion
Prion
•added 2018/08/29 10:29 p.m.•22 views

Design/Logic Flaw

The image rendering component createGenericPreview of the Open Whisper Signal app through 2.29.0 for iOS fails to check for unreasonably large images before manipulating received images. This allows for a large image sent to a user to exhaust all available memory when the image is displayed,...

7.8CVSS8.1AI score0.01085EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2018/08/29 12:00 a.m.•5 views

PT-2018-13416

Name of the Vulnerable Software and Affected Versions Open Whisper Signal versions through 2.29.0 Description The issue arises from the image rendering component, specifically the createGenericPreview function, which fails to check for unreasonably large images before manipulating them. This allo...

8.6CVSS0.01085EPSS
SaveExploits0References3
CVE
CVE
•added 2018/06/11 9:00 p.m.•148 views

CVE-2016-9077

The CVE-2016-9077 issue affects Mozilla Firefox

7CVSS7.3AI score0.00761EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
•added 2018/05/15 12:00 a.m.•37 views

Simple DirectMedia Layer SDL2_image buffer overflow vulnerability (CNVD-2018-10934 )

Simple DirectMedia Layer is a multi-platform library for accessing low-level hardware and graphics and providing support for games, software, and emulators. sdl2image is a component used in it for parsing and displaying various image file formats. A stack buffer overflow vulnerability exists in t...

8.8CVSS7.8AI score0.02401EPSS
SaveExploits0References1
CNVD
CNVD
•added 2018/05/15 12:00 a.m.•30 views

Simple DirectMedia Layer SDL2_image Buffer Overflow Vulnerability

Simple DirectMedia Layer is a multi-platform library for accessing low-level hardware and graphics and providing support for games, software, and emulators. sdl2image is a component used in it for parsing and displaying various image file formats. A heap buffer overflow vulnerability exists in th...

8.8CVSS7.8AI score0.0235EPSS
SaveExploits0References1
NVD
NVD
•added 2018/04/24 7:29 p.m.•15 views

CVE-2017-14442

An exploitable code execution vulnerability exists in the BMP image rendering functionality of SDL2image-2.0.2. A specially crafted BMP image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...

8.8CVSS8.9AI score0.0235EPSS
SaveExploits0References5
OSV
OSV
•added 2018/04/24 7:29 p.m.•32 views

CVE-2017-14442

An exploitable code execution vulnerability exists in the BMP image rendering functionality of SDL2image-2.0.2. A specially crafted BMP image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...

8.8CVSS4.5AI score
SaveExploits0References5
OSV
OSV
•added 2018/04/24 7:29 p.m.•34 views

CVE-2017-14440

An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2image-2.0.2. A specially crafted ILBM image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...

8.8CVSS4.8AI score
SaveExploits0References5
OSV
OSV
•added 2018/04/24 7:29 p.m.•7 views

ALPINE-CVE-2017-14440

An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2image-2.0.2. A specially crafted ILBM image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...

8.8CVSS8.2AI score0.02401EPSS
SaveExploits0References1
OSV
OSV
•added 2018/04/24 7:29 p.m.•35 views

CVE-2017-14441

An exploitable code execution vulnerability exists in the ICO image rendering functionality of SDL2image-2.0.2. A specially crafted ICO image can cause an integer overflow, cascading to a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this...

8.8CVSS3.7AI score
SaveExploits0References5
OSV
OSV
•added 2018/04/24 7:29 p.m.•10 views

DEBIAN-CVE-2017-14440

An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2image-2.0.2. A specially crafted ILBM image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...

8.8CVSS7.8AI score0.02401EPSS
SaveExploits0References1
OSV
OSV
•added 2018/04/24 7:29 p.m.•29 views

CVE-2017-12122

An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2image-2.0.2. A specially crafted ILBM image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...

8.8CVSS3.4AI score
SaveExploits0References5
OSV
OSV
•added 2018/04/24 7:29 p.m.•11 views

ALPINE-CVE-2017-14449

A double-Free vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.2. A specially crafted XCF image can cause a Double-Free situation to occur. An attacker can display a specially crafted image to trigger this vulnerability...

8.8CVSS6.9AI score0.0162EPSS
SaveExploits0References1
OSV
OSV
•added 2018/04/24 7:29 p.m.•12 views

DEBIAN-CVE-2017-12122

An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2image-2.0.2. A specially crafted ILBM image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...

8.8CVSS7.8AI score0.0235EPSS
SaveExploits0References1
OSV
OSV
•added 2018/04/24 7:29 p.m.•9 views

ALPINE-CVE-2017-14441

An exploitable code execution vulnerability exists in the ICO image rendering functionality of SDL2image-2.0.2. A specially crafted ICO image can cause an integer overflow, cascading to a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this...

8.8CVSS8.2AI score0.02627EPSS
SaveExploits0References1
OSV
OSV
•added 2018/04/24 7:29 p.m.•12 views

ALPINE-CVE-2017-12122

An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2image-2.0.2. A specially crafted ILBM image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...

8.8CVSS8.2AI score0.0235EPSS
SaveExploits0References1
Snyk
Snyk
•added 2018/04/24 7:29 p.m.•9 views

Double Free

Overview Affected versions of this package are vulnerable to Double Free. A double-Free vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.2. A specially crafted XCF image can cause a Double-Free situation to occur. An attacker can display a specially crafted image to...

8.8CVSS6.8AI score0.0162EPSS
SaveExploits0References2
OSV
OSV
•added 2018/04/24 7:29 p.m.•10 views

UBUNTU-CVE-2017-12122

An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2image-2.0.2. A specially crafted ILBM image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...

8.8CVSS7.4AI score0.0235EPSS
SaveExploits0References5
Rows per page
Query Builder