CVE-2022-23400

CVE-2022-23400 describes a stack-based buffer overflow in Accusoft ImageGear 19.10, specifically IGXMPXMLParser::parseDelimiter when processing PSD inputs. The TALOS analysis shows a 256-byte destination buffer (buffer_ovw) that can overflow due to mis-calculated shifts when parsing XMP/PSD data,...

Accusoft ImageGear缓冲区错误漏洞

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft Corporation. A security vulnerability exists in Accusoft ImageGear version 19.10 that stems from an error in the IGXMPXMLParser::parseDelimiter function. A remote attacker could use a specially crafted PSD fil...

CVE-2022-27529

A maliciously crafted PICT, BMP, PSD or TIF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 may be used to write beyond the allocated buffer while parsing PICT, BMP, PSD or TIF file. This vulnerability may be exploited to execute arbitrary code...

CVE-2022-27529

CVE-2022-27529 affects Autodesk AutoCAD 2019–2022, where parsing malicious PICT/BMP/PSD/TIF files can write beyond allocated buffers, enabling arbitrary code execution. Root cause: buffer overrun during image format parsing. Public details confirm impact as arbitrary code execution; exploitation ...

The vulnerability of the stb_image.h component in the SIXEL Libsixel encoder/decoder implementation allows a malicious actor to cause a service failure.

The vulnerability of the stbimage.h component in the SIXEL Libsixel encoder/decoder implementation is related to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability allows a malicious actor to cause service failures using a specially created PSD file...

CVE-2021-42730

Adobe Bridge version 11.1.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious PSD file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

CVE-2021-42730

Adobe Bridge version 11.1.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious PSD file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

Memory corruption

Adobe Bridge version 11.1.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious PSD file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

CVE-2021-42730

Adobe Bridge 11.1.1 and earlier is affected by a memory corruption vulnerability caused by insecure handling of a malicious PSD file, potentially enabling arbitrary code execution in the user’s context. Exploitation requires user interaction (opening a crafted file). A patch is available: update ...

Autodesk AutoCAD PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PS...

Mageia: Security Advisory (MGASA-2014-0087)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-40733

Adobe Animate version 21.0.9 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious .psd file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

Memory corruption

Adobe Animate version 21.0.9 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious .psd file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

CVE-2021-40733 Adobe Animate Memory Corruption Could Lead To Arbitrary Code Execution

Adobe Animate version 21.0.9 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious .psd file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

CVE-2021-40733

CVE-2021-40733 affects Adobe Animate 21.0.9 and earlier. It involves a memory corruption vulnerability caused by insecure handling of a malicious PSD file, potentially allowing arbitrary code execution in the current user context. Exploitation requires user interaction. The issue is addressed by ...

Nomacs has an unspecified vulnerability

Nomacs is a free open source image viewer for viewing all common image formats, including Raw and Psd images. It is used to view all common image formats, including Raw and Psd images. Nomacs v3.15.0 contains a security vulnerability that could be exploited by an attacker to cause a denial of...

WildBit Viewer Buffer Overflow Vulnerability (CNVD-2021-88217)

WildBit Viewer is a compact image viewer with slide show and editor. A buffer overflow vulnerability exists in Editor!TMethodImplementationIntercept+0x53f6c3 in WildBit Viewer version 6.6, which can be exploited by an attacker to cause a denial of service via a specially crafted psd file...

CVE-2020-23888

A User Mode Write AV in Editor!TMethodImplementationIntercept+0x53f6c3 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted psd file...

CVE-2020-23888

A User Mode Write AV in Editor!TMethodImplementationIntercept+0x53f6c3 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted psd file...

Design/Logic Flaw

A User Mode Write AV in Editor!TMethodImplementationIntercept+0x53f6c3 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted psd file...