370 matches found
CVE-2024-11566
IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...
Giflib 安全漏洞
Giflib is a library and utility program for processing GIFs from the Giflib open source. A security vulnerability exists in Giflib version v5.2.2 that stems from vulnerability to heap buffer overflow attacks...
The vulnerability of ImageSharp’s 2D graphics library decoder allows a hacker to induce a service failure.
The vulnerability of the ImageSharp 2D graphics library decoder is related to uncontrolled memory allocation during the processing of GIF and JPEG files. Exploiting this vulnerability can allow an attacker to cause service interruptions...
Moderate: Red Hat Security Advisory: protobuf security update
An update for protobuf is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
RHEL 8 : protobuf (RHSA-2024:3433)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3433 advisory. The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet...
CVE-2023-37331
Kofax Power PDF GIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must...
The vulnerability in the file src/gif.imageio/gifinput.cpp of the OpenImageIO image processing library allows a attacker to cause a service failure.
The vulnerability in the src/gif.imageio/gifinput.cpp file of the OpenImageIO library relates to the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Fedora: Security Advisory for liblas (FEDORA-2024-ef8c8a8b37)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
XAO-Web 安全漏洞
XAO-Web is part of the XAO suite of open source web services. It allows dynamic web content to be built using data, templates and external input. A security vulnerability exists in XAO-Web versions prior to 1.84, which stems from the XAO Web module incorrectly handling JSON output characters duri...
[SECURITY] Fedora 38 Update: liblas-1.8.2-0.12.gitf1da555.fc38
libLAS is a C/C++ library for reading and writing the very common LAS LiDAR format. The ASPRS LAS format is a sequential binary format used to store data from LiDAR sensors and by LiDAR processing software for data interchange and archival...
[SECURITY] Fedora 40 Update: python-javaobj-0.4.3-12.fc40
python-javaobj is a python library that provides functions for reading and writing writing is WIP currently Java objects serialized or will be deserialized by ObjectOutputStream. This form of object representation is a standard data interchange format in Java world...
PT-2024-21831 · Kofax · Kofax Power Pdf
Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Kofax Power PDF. User interaction is required to exploit this issue, where the targ...
CVE-2023-48230
Cap'n Proto is a data interchange format and capability-based RPC system. In versions 1.0 and 1.0.1, when using the KJ HTTP library with WebSocket compression enabled, a buffer underrun can be caused by a remote peer. The underrun always writes a constant value that is not attacker-controlled,...
[SECURITY] Fedora 37 Update: usd-22.05b-28.fc37
Universal Scene Description USD is a time-sampled scene description for interchange between graphics applications...
[SECURITY] Fedora 38 Update: usd-22.05b-39.fc38
Universal Scene Description USD is a time-sampled scene description for interchange between graphics applications...
[SECURITY] Fedora 39 Update: usd-23.08-2.fc39
Universal Scene Description USD is a time-sampled scene description for interchange between graphics applications...
UBUNTU-CVE-2023-43281
Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stbiloadgifmain function...
The vulnerability of the DumpScreen2RGB() function (gif2rgb.c) in the GIFLIB library allows a hacker to gain unauthorized access to protected information.
The vulnerability of the DumpScreen2RGB function gif2rgb.c in the GIFLIB library is related to the escape of the operation beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an unauthorized person to gain unauthorized access to protected information...
ZPLGFA Input Validation Error Vulnerability
ZPLGFA is a Go package from Simon Waldherr's personal developer. It is used to convert PNG, JPEG and GIF encoded graphic files into ZPL compatible ^GF elements graphic fields. A security vulnerability exists in ZPLGFA version 1.1.1, which stems from allowing an attacker to cause a panic with a...