3581 matches found
CVE-2019-14373
An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a heap-based buffer over-read in libpng via a crafted flif file...
Heap overflow
An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a heap-based buffer over-read in libpng via a crafted flif file...
CVE-2019-14373
CVE-2019-14373 affects Free Lossless Image Format (FLIF) 0.3, where the crash is triggered in image_save_png (image/image-png.cpp) leading to a heap-based buffer over-read via a crafted FLIF file. The vulnerability arises from improper data boundary handling during processing, as described in mul...
CVE-2019-14373
An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a heap-based buffer over-read in libpng via a crafted flif file...
Critical Photon OS Security Update - PHSA-2019-0246
Updates of 'python3', 'unzip', 'python2', 'libxslt', 'libpng', 'gnupg' packages of Photon OS have been released...
EulerOS 2.0 SP8 : libpng (EulerOS-SA-2019-1787)
According to the version of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - pngimagefree in png.c in libpng 1.6.36 has a use-after-free because pngimagefreefunction is called under pngsafeexecute.CVE-2019-7317 Note that...
Amazon Linux 2 : java-11-amazon-corretto (ALAS-2019-1246)
OpenJDK: Insufficient restriction of privileges in AccessController Security, 8216381 CVE-2019-2786 OpenJDK: Unbounded memory allocation during deserialization in Collections Utilities, 8213432 CVE-2019-2769 libpng: pngimagefree in png.c in libpng has a use-after-free because pngimagefreefunction...
Oracle Java SE 1.7.0_231 / 1.8.0_221 / 1.11.0_4 / 1.12.0_2 Multiple Vulnerabilities (Jul 2019 CPU) (Unix)
The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 7 Update 231, 8 Update 221, 11 Update 4, or 12 Update 2. It is, therefore, affected by multiple vulnerabilities: - Unspecified vulnerabilities in the utilities and JCE subcomponents of Oracle...
Medium: java-11-amazon-corretto
Issue Overview: OpenJDK: Insufficient restriction of privileges in AccessController Security, 8216381 CVE-2019-2786 OpenJDK: Unbounded memory allocation during deserialization in Collections Utilities, 8213432 CVE-2019-2769 libpng: pngimagefree in png.c in libpng has a use-after-free because...
CVE-2017-12652
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
AZL-45045 CVE-2017-12652 affecting package libpng15 1.5.30-15
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
AZL-44469 CVE-2017-12652 affecting package libpng12 1.2.57-16
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
AZL-44973 CVE-2017-12652 affecting package fltk for versions less than 1.3.8-1
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
CVE-2017-12652
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
DEBIAN-CVE-2017-12652
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
AZL-43573 CVE-2017-12652 affecting package libpng12 1.2.57-16
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
AZL-45102 CVE-2017-12652 affecting package openjpeg2 2.3.1-12
libpng before 1.6.32 does not properly check the length of chunks against the user limit...
AZL-43468 CVE-2017-12652 affecting package libpng15 1.5.30-15
libpng before 1.6.32 does not properly check the length of chunks against the user limit...