CVE-2021-39824 Adobe Premiere Elements png Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution

Adobe Premiere Elements version 2021.2235820 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious png file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this...

CVE-2021-39824

CVE-2021-39824 affects Adobe Premiere Elements 2021.2235820 and earlier, caused by memory corruption from insecure handling of a malicious PNG file, enabling arbitrary code execution in the caller’s context. Exploitation requires user interaction and is tied to a local/renderer path described in ...

Libsixel has unspecified vulnerabilities

libsixel is a package that provides an encoding/decoding implementation for DEC SIXEL graphics and other converter programs. libsixel has an unspecified vulnerability that could be exploited by an attacker to cause a denial of service DOS via a specially crafted PNG file...

CVE-2020-21048

An issue in the dither.c component of libsixel prior to v1.8.4 allows attackers to cause a denial of service DOS via a crafted PNG file...

CVE-2020-21048

An issue in the dither.c component of libsixel prior to v1.8.4 allows attackers to cause a denial of service DOS via a crafted PNG file...

Denial of service

An issue in the dither.c component of libsixel prior to v1.8.4 allows attackers to cause a denial of service DOS via a crafted PNG file...

CVE-2020-21048

An issue in the dither.c component of libsixel prior to v1.8.4 allows attackers to cause a denial of service DOS via a crafted PNG file...

CVE-2020-21048

CVE-2020-21048 affects the libsixel library, specifically the dither.c component, with a vulnerability present in versions prior to 1.8.4 that allows a crafted PNG to trigger a denial of service. The issue is documented as a DOS condition via crafted PNG input and is addressed by upgrading to lib...

CVE-2020-21048

An issue in the dither.c component of libsixel prior to v1.8.4 allows attackers to cause a denial of service DOS via a crafted PNG file...

CVE-2020-21048

An issue in the dither.c component of libsixel prior to v1.8.4 allows attackers to cause a denial of service DOS via a crafted PNG file...

PT-2021-4181

Name of the Vulnerable Software and Affected Versions Adobe Premiere Elements versions 2021.2235820 and earlier Description The issue is related to a memory corruption vulnerability due to insecure handling of a malicious png file, potentially resulting in arbitrary code execution in the context ...

libsixel 安全漏洞

libsixel is a package that provides an encoding/decoding implementation for DEC SIXEL graphics and other converter programs. libsixel has an unspecified vulnerability that could be exploited by an attacker to cause a denial of service DOS via a specially crafted PNG file...

CVE-2021-28566

Magento versions 2.4.2 and earlier, 2.4.1-p1 and earlier and 2.3.6-p1 and earlier are vulnerable to an Information Disclosure vulnerability when uploading a modified png file to a product image. Successful exploitation could lead to the disclosure of document root path by an unauthenticated...

CVE-2021-28566

Magento versions 2.4.2 and earlier, 2.4.1-p1 and earlier and 2.3.6-p1 and earlier are vulnerable to an Information Disclosure vulnerability when uploading a modified png file to a product image. Successful exploitation could lead to the disclosure of document root path by an unauthenticated...

CVE-2021-28566

Magento information disclosure vulnerability (CVE-2021-28566) affects Magento Open Source/Commerce versions 2.4.2 and earlier, 2.4.1-p1 and earlier, and 2.3.6-p1 and earlier. The issue arises when uploading a modified PNG image to a product image, potentially allowing an unauthenticated attacker ...

@bolstergroup/botstr.io-set-times (>=0.0.1, <=0.0.7), @bolstergroup/botstr.io-spotify (>=0.0.18, <=0.0.43) +40 more potentially affected by CVE-2021-23631 via convert-svg-to-png (>=0.3.3, <=0.5.0)

convert-svg-to-png NPM version =0.3.3, =0.0.1, =0.0.18, =1.0.44, =0.1.0, =0.0.1, =0.1.6, =1.0.0, =0.0.1, =1.0.2, =1.0.3, =0.0.1, =1.4.0, =1.5.0 and more Source cves: CVE-2021-23631 Source advisory: SNYK:JS-CONVERTSVGTOPNG-2348244...

CVE-2021-36071 Adobe Bridge PNG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Bridge versions 11.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim mus...

ASB-A-190188264

In RGBtoBGR1portable of SkSwizzleropts.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Github libjxl数字错误漏洞

libjxl is a reference implementation of the JPEG XL image format. libjxl version 0.3.7 of lib/extras/codecapng.cc jxl::DecodeImageAPNG is vulnerable to a dezero error. An attacker can exploit this vulnerability via a malicious APNG file to cause a denial of service...

aart (>=0.1.0, <=0.1.1), advancedresearch-higher_order_point (>=0.1.0, <=0.3.0) +665 more potentially affected by CVE-2020-35916 via image (>=0.2.4, <=0.23.10)

image CARGO version =0.2.4, =0.1.0, =0.1.0, =0.0.3, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.5, =0.1.0, =0.1.0, =0.1.0, =0.11.0, =0.15.3 - amethyst-console 0.1.0 and more Source cves: CVE-2020-35916 Source advisory: OSV:GHSA-9WGH-VJJ7-7433...