ImageMagick has a Memory Leak in LoadOpenCLDeviceBenchmark() when parsing malformed XML

Summary A memory leak vulnerability exists in the LoadOpenCLDeviceBenchmark function in MagickCore/opencl.c. When parsing a malformed OpenCL device profile XML file that contains closing tags, the function fails to release allocated memory for string members platformname, vendorname, name, versio...

Release of Invalid Pointer or Reference

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

Release of Invalid Pointer or Reference

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

Release of Invalid Pointer or Reference

Overview Affected versions of this package are vulnerable to Release of Invalid Pointer or Reference in the LoadOpenCLDeviceBenchmark function when parsing malformed XML files. An attacker can cause memory exhaustion and potential denial of service by placing specially crafted XML files with...

EUVD-2019-2869

Malware in sbrugna...

EUVD-2017-9344

Malware in sbrugna...

EUVD-2014-1128

Malware in sbrugna...

EUVD-2014-1454

Malware in sbrugna...

EUVD-2024-34598

Malicious code in bioql PyPI...

EUVD-2023-40442

Malicious code in bioql PyPI...

EUVD-2024-34465

Malicious code in bioql PyPI...

EUVD-2024-21339

Malicious code in bioql PyPI...

Medium: cuda-opencl-12-9

Issue Overview: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. A successful exploit of this...

CVE-2024-32667

Out-of-bounds read for some OpenCLTM software may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-36493

Uncontrolled search path in some IntelR SDK for OpenCLTM Applications software may allow an authenticated user to potentially enable escalation of privilege via local access...

Low: cuda-opencl-12-8

Issue Overview: NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability might lead to a partial denial of service. CVE-2024-53870...

[SECURITY] Fedora 41 Update: llama-cpp-b3561-1.fc41

The main goal of llama.cpp is to run the LLaMA model using 4-bit integer quantization on a MacBook Plain C/C++ implementation without dependencies Apple silicon first-class citizen - optimized via ARM NEON, Accelerate and Metal frameworks AVX, AVX2 and AVX512 support for x86 architectures Mixed F...

CVE-2024-34028

Uncontrolled search path in some IntelR Graphics Offline Compiler for OpenCLTM Code software for Windows before version 2024.1.0.142, graphics driver 31.0.101.5445 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-32667

Out-of-bounds read for some OpenCLTM software may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-32667

Out-of-bounds read for some OpenCLTM software may allow an authenticated user to potentially enable denial of service via local access...