CVE-2024-8025

Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nikon NEF Codec. User interaction is required to exploit this vulnerability in that...

CVE-2024-8025

CVE-2024-8025 affects Nikon NEF Codec, in the NRW file parsing path. The flaw is a heap-based buffer overflow caused by missing validation of user-supplied data length before copying into a heap buffer, enabling Remote Code Execution . Exploitation requires user interaction (the target must visit...

CVE-2024-8025 Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nikon NEF Codec. User interaction is required to exploit this vulnerability in that...

Nikon NEF Codec 安全漏洞

Nikon NEF Codec is a codec module from Nikon Japan. A security vulnerability exists in Nikon NEF Codec that originates from the failure to properly validate the length of user-supplied data before copying it to a heap-based buffer. An attacker could exploit the vulnerability to execute arbitrary...

CVE-2024-8025: Heap-based Buffer Overflow

Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nikon NEF Codec. User interaction is required to exploit this vulnerability in that...

PT-2024-38756 · Nikon · Nikon Nef Codec

Name of the Vulnerable Software and Affected Versions: Nikon NEF Codec affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Nikon NEF Codec. User interaction is required to exploit this issue, where the target must...

Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Nikon NEF Codec. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of NRW...

libraw:libraw_nef_fuzzer: Heap-buffer-overflow in libraw_sget4_static

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5307387977203712 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawneffuzzer Job Type: libfuzzerasanlibraw Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

nef-design.de Improper Access Control vulnerability OBB-3778923

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

libraw:libraw_nef_fuzzer: Use-of-uninitialized-value in LibRaw::convert_to_rgb_loop

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6517284909481984 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawneffuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

GLSA-202305-34 : CGAL: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202305-34 CGAL: Multiple Vulnerabilities - A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef2/PMioparser.h PMioparser::readvertex...

Fedora: Security Advisory for LibRaw (FEDORA-2023-659606fa84)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: LibRaw-0.21.1-4.fc38

LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. LibRaw is based on the source codes of the dcraw utility, where part of drawbacks have already been eliminated and part will be fixed in future...

libraw:libraw_nef_fuzzer: Crash in LibRaw::sget4

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=4516421182029824 Project: libraw Fuzzing Engine: honggfuzz Fuzz Target: librawneffuzzer Job Type: honggfuzzasanlibraw Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f1343c777fd Crash...

SUSE CVE-2020-28601

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef2/PMioparser.h PMioparser::readvertex Faceof OOB read. An attacker can provide malicious input to trigger this vulnerability...

SUSE CVE-2020-28636

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser::readsloop slh-twin An attacker can provide malicious input to trigger this vulnerability...

SUSE CVE-2020-35636

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in NefS2/SNCioparser.h SNCioparser::readsface sfh-volume OOB read. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution...

SUSE CVE-2020-35628

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser::readsloop slh-incidentsface. An attacker can provide malicious input to trigger this vulnerability...

Vulnerability of the SNC_io parser function <EW>::read_sedge() and seh->sprev() in the Nef_S2/SNC_io parser.h component. This component is part of the Computational Geometry Algorithms Library CGAL, allowing an intruder to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SNCio parser function ::readsedge in the NefS2/SNCio parser component, as part of the CGAL computational geometry algorithm library, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise...

Vulnerability of the SM_io parser function: Decorator_.::read_vertex(), set_face() in the component Nef_S2/SM_io parser.h, part of the Computational Geometry Algorithms library CGAL. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SMio parser function in the NefS2/SMioparser.h component, belonging to the Computational Geometry Algorithms library, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity,...