389 matches found
CVE-2020-24293
CVE-2020-24293 is a Buffer Overflow in FreeImage 3.19.0 (PSDParser.cpp psdThumbnail::Read) that enables remote code execution when opening crafted PSD files. Connected sources (OSV: OESA-2024-2305 and Fedora advisories) confirm a security update exists; remediation is to apply the FreeImage secur...
CVE-2020-24295
Buffer Overflow vulnerability in PSDParser.cpp::ReadImageLine in FreeImage 3.19.0 r1859 allows remote attackers to ru narbitrary code via use of crafted psd file...
CVE-2020-24294
The CVE-2020-24294 entry describes a buffer overflow in FreeImage 3.19.0 (r1859) in the PSDParser.cpp function psdParser::UnpackRLE, allowing a remote attacker to cause a denial of service by opening a crafted PSD file. Connected sources confirm the affected component and the DoS impact; no patch...
CVE-2020-24294
Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 r1859 allows remote attackers to cuase a denial of service via opening of crafted psd file...
CVE-2020-24294
Buffer Overflow vulnerability in psdParser::UnpackRLE function in PSDParser.cpp in FreeImage 3.19.0 r1859 allows remote attackers to cuase a denial of service via opening of crafted psd file...
CVE-2020-24295
Buffer Overflow vulnerability in PSDParser.cpp::ReadImageLine in FreeImage 3.19.0 r1859 allows remote attackers to ru narbitrary code via use of crafted psd file...
CVE-2020-24293
Buffer Overflow vulnerability in psdThumbnail::Read in PSDParser.cpp in FreeImage 3.19.0 r1859 allows remote attackers to run arbitrary code via opening of crafted psd file...
CVE-2020-24295
Buffer Overflow vulnerability in PSDParser.cpp::ReadImageLine in FreeImage 3.19.0 r1859 allows remote attackers to ru narbitrary code via use of crafted psd file...
CVE-2020-24293
Buffer Overflow vulnerability in psdThumbnail::Read in PSDParser.cpp in FreeImage 3.19.0 r1859 allows remote attackers to run arbitrary code via opening of crafted psd file...
MGASA-2023-0151 Updated openimageio packages fix security vulnerability
A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can result in sensiti...
CVE-2023-22234 Adobe Premiere Rush PSD file Stack-based Buffer Overflow Arbitrary code execution
Adobe Premiere Rush version 2.6 and earlier is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
SUSE CVE-2014-9828
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file...
SUSE CVE-2016-7535
coders/psd.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds write via a crafted PSD file...
SUSE CVE-2017-5509
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write...
SUSE CVE-2017-5511
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow...
SUSE CVE-2017-9440
In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPSDChannel in coders/psd.c, which allows attackers to cause a denial of service via a crafted file...
SUSE CVE-2017-13061
In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd.c, which allows attackers to cause a denial of service ReadPSDImage memory exhaustion via a crafted file...
SUSE CVE-2017-14172
In coders/ps.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSImage due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted PSD file, which claims a large "extent" field in the header but does not contain sufficient backing data, is provided, the loop over "length"...