GHSA-3264-3FM9-FG44 Infinite Loop in Apache Tika

A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23...

GHSA-3H29-52VH-PQGR Uncontrolled Resource Consumption in Apache Tika

A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23...

Fedora: Security Advisory for perl-Image-ExifTool (FEDORA-2021-e3d8833d36)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Pillow 资源管理错误漏洞

Pillow is a Python-based image processing library. A denial of service vulnerability exists in versions of Pillow prior to 8.2.0, which stems from the fact that PSDImagePlugin.PsdImageFile does not properly check the number of input layers based on data block size, and can be exploited by attacke...

The vulnerability in the `Exiv2::IptcParser::decode` function of the `iptc.cpp` file in the media metadata management library Exiv2, related to integer overflow, allows attackers to cause service interruptions.

The vulnerability in the Exiv2::IptcParser::decode function of the iptc.cpp file in the media metadata management library Exiv2 is related to incorrect processing of PSD files. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Exiv2::PsdImage::readMetadata function in the psdimage.cpp file of the Exiv2 metadata management library is related to infinite loop execution, allowing attackers to cause service interruptions.

The vulnerability of the Exiv2::PsdImage::readMetadata function in the psdimage.cpp file of the Exiv2 metadata management library is related to improper processing of PSD files. Exploiting this vulnerability could allow an attacker to cause service failures...

Accusoft ImageGear PSD read_icc_icCurve_data heap-based buffer overflow vulnerability

Summary A heap-based buffer overflow vulnerability exists in the PSD readiccicCurvedata functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to an integer overflow that, in turn, leads to a heap buffer overflow. An attacker can provide a malicious file to trigger...

CVE-2021-27584

When a user opens manipulated PhotoShop Document .PSD format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-27584

CVE-2021-27584 affects SAP 3D Visual Enterprise Viewer (version 9). Opening manipulated PSD files from untrusted sources can trigger a crash, making the application temporarily unavailable until restart. The description indicates a denial-of-service style impact on the user experience. No remedia...

Accusoft ImageGear out-of-bounds write vulnerability (CNVD-2021-12104)

Accusoft ImageGear is a multi-platform, multi-language document imaging developer toolkit. An out-of-bounds write vulnerability exists in the PSD Header handling feature of Accusoft ImageGear 19.8. An attacker could exploit this vulnerability via specially crafted files to achieve code execution...

CVE-2020-13585

An out-of-bounds write vulnerability exists in the PSD Header processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2020-13585

An out-of-bounds write vulnerability exists in the PSD Header processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

Cross site scripting

An out-of-bounds write vulnerability exists in the PSD Header processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2020-13585

An out-of-bounds write vulnerability exists in the PSD Header processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2020-13585

CVE-2020-13585 affects Accusoft ImageGear 19.8 PSD header processing. The vulnerability arises from a buffer allocation bug in psd_header_processing: alloc_size is derived from image width and bit depth, and _oobw_buffer is allocated via AF_memm_alloc using size from file data; AF_memm_alloc wrap...

Accusoft ImageGear PSD Header processing out-of-bounds write vulnerability

Summary An out-of-bounds write vulnerability exists in the PSD Header processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Tested Versions Accusoft ImageGear 19.8...

Input validation

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21450

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

SAP 3D Visual Enterprise Viewer PSD File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service. The vulnerability existed because of an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service CPU exhaustion via a crafted psd image file...