Buffer overflow

A maliciously crafted TIF or PICT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability may be exploited to execute arbitrary code...

CVE-2022-27529

CVE-2022-27529 affects Autodesk AutoCAD 2019–2022, where parsing malicious PICT/BMP/PSD/TIF files can write beyond allocated buffers, enabling arbitrary code execution. Root cause: buffer overrun during image format parsing. Public details confirm impact as arbitrary code execution; exploitation ...

PT-2022-18468

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD versions 2019 through 2022 Description A maliciously crafted PICT, BMP, PSD, or TIF file may be used to write beyond the allocated buffer while parsing the file, potentially allowing the execution of arbitrary code...

PT-2022-18470

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD versions 2019 through 2022 Description A maliciously crafted TIF or PICT file can be used to write beyond the allocated buffer through a buffer overflow issue. This may be exploited to execute arbitrary code. Recommendations F...

CVE-2022-27529: Out-of-bounds Write

A maliciously crafted PICT, BMP, PSD or TIF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 may be used to write beyond the allocated buffer while parsing PICT, BMP, PSD or TIF file. This vulnerability may be exploited to execute arbitrary code...

CVE-2022-27530: Out-of-bounds Write

A maliciously crafted TIF or PICT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability may be exploited to execute arbitrary code...

Accusoft ImageGear parse_raster_data out-of-bounds write vulnerability

Summary An out-of-bounds write vulnerability exists in the parserasterdata functionality of Accusoft ImageGear 19.10. A specially-crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability. Tested Versions Accusoft ImageGear 19.10...

Autodesk AutoCAD PICT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PI...

Autodesk AutoCAD PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PI...

Autodesk AutoCAD PICT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PI...

Autodesk AutoCAD PICT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

Autodesk AutoCAD PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PI...

The vulnerability of Adobe Illustrator, a graphic editor, arises from copying buffers without checking the size of the input data. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe Illustrator graphic editor lies in the copying of buffers without checking the size of the input data when processing PICT graphic files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Apple macOS ImageIO PICT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ImageIO...

libsixel Denial of Service Vulnerability

libsixel is a package that provides an encoding/decoding implementation for DEC SIXEL graphics and other converter programs. libsixel has a denial of service vulnerability in v1.10.3 and earlier, which stems from a NULL pointer dereference in libsixel's stbimage.h component, and can be exploited ...

CVE-2021-45340

In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stbimage.h component of libsixel allows attackers to cause a denial of service DOS via a crafted PICT file...

CVE-2021-45340

In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stbimage.h component of libsixel allows attackers to cause a denial of service DOS via a crafted PICT file...

CVE-2021-45340

In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stbimage.h component of libsixel allows attackers to cause a denial of service DOS via a crafted PICT file...

DEBIAN-CVE-2021-45340

In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stbimage.h component of libsixel allows attackers to cause a denial of service DOS via a crafted PICT file...

Null pointer dereference

In Libsixel prior to and including v1.10.3, a NULL pointer dereference in the stbimage.h component of libsixel allows attackers to cause a denial of service DOS via a crafted PICT file...