301 matches found
CVE-2020-20739
imvips2dz in /libvips/libvips/deprecated/imvips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause the leakage of remote server path or stack address...
Path traversal
imvips2dz in /libvips/libvips/deprecated/imvips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause the leakage of remote server path or stack address...
UBUNTU-CVE-2020-20739
imvips2dz in /libvips/libvips/deprecated/imvips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause the leakage of remote server path or stack address...
CVE-2020-20739
imvips2dz in /libvips/libvips/deprecated/imvips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause the leakage of remote server path or stack address...
CVE-2020-20739
imvips2dz in /libvips/libvips/deprecated/imvips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause the leakage of remote server path or stack address...
CVE-2020-20739
imvips2dz in /libvips/libvips/deprecated/imvips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause the leakage of remote server path or stack address...
CVE-2020-20739
CVE-2020-20739 affects VIPS (libvips) where im_vips2dz in libvips/deprecated/im_vips2dz.c uses an uninitialized variable, potentially leaking a remote server path or stack address. Multiple advisories reference VIPS and CVE-2020-20739 in the context of the upstream library and vendor updates. Deb...
libvips 安全漏洞
libvips is a demand-driven multi-threaded image processing library. libvips versions prior to 8.8.2 are vulnerable to an information disclosure. The vulnerability stems from imvips2dz in /libvips/libvips/deprecated/imvips2dz.c in libvips having uninitialized variables. An attacker could use this...
libvips:jpegsave_buffer_fuzzer: Heap-buffer-overflow in rtiff_parse_palette
Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=4660373640445952 Project: libvips Fuzzing Engine: afl Fuzz Target: jpegsavebufferfuzzer Job Type: aflasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...
libvips:smartcrop_fuzzer: Heap-buffer-overflow in exif_data_load_data
Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5175690342957056 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: smartcropfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: Heap-buffer-overflow READ 6 Crash Address:...
PT-2021-6807 · Libvips +3 · Libvips +3
Name of the Vulnerable Software and Affected Versions: Libvips version 8.10.5 Description: The issue is related to a Division-By-Zero vulnerability in the functions vips eye point and vips mask point of the Libvips library. This vulnerability is caused by the lack of a check for division by zero...
[SECURITY] Fedora 33 Update: rubygem-image_processing-1.11.0-1.fc33
High-level wrapper for processing images for the web with ImageMagick or libvips...
Fedora: Security Advisory for rubygem-image_processing (FEDORA-2020-4dd34860a3)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
libvips:smartcrop_fuzzer: Segv on unknown address in vips_XYZ2Lab_line
Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=4829562723368960 Project: libvips Fuzzing Engine: honggfuzz Fuzz Target: smartcropfuzzer Job Type: honggfuzzasanlibvips Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...
libvips:jpegsave_file_fuzzer: Heap-use-after-free in vips_buf_vappendf
Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5663684670259200 Project: libvips Fuzzing Engine: honggfuzz Fuzz Target: jpegsavefilefuzzer Job Type: honggfuzzasanlibvips Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address:...
libvips:pngsave_buffer_fuzzer: Crash in vips_foreign_load_gif_render
Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5640307544948736 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: pngsavebufferfuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x60d0002e9060...
PT-2020-15278 · Libvips +3 · Libvips +3
Name of the Vulnerable Software and Affected Versions: libvips versions prior to 8.8.2 Description: The issue is related to an uninitialized variable in the im vips2dz function, located in /libvips/libvips/deprecated/im vips2dz.c. This may cause the leakage of the remote server path or stack...
libvips:jpegsave_file_fuzzer: Crash in vips_region_copy
Project: https://github.com/libvips/libvips.git Detailed Report: https://oss-fuzz.com/testcase?key=5758791811596288 Project: libvips Fuzzing Engine: libFuzzer Fuzz Target: jpegsavefilefuzzer Job Type: libfuzzerasanlibvips Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x7fa704521000 Crash...
Libvips Reuse After Release Vulnerability
libvips is a demand-driven multithreaded image processing library. A post-release reuse vulnerability exists in versions of libvips prior to 8.8.2, which stems from vipsforeignloadgifscanimage in foreign/gifload.c in libvips attempting to access the color image prior to the DGifGetImageDesc call,...
