Stack overflow

Adobe Photoshop versions 21.2.9 and earlier and 22.4.2 and earlier is affected by a stack overflow vulnerability due to insecure handling of a crafted PSD file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a...

CVE-2021-36005 Adobe Photoshop PSD File Parsing Stack Overflow Vulnerability

Adobe Photoshop versions 21.2.9 and earlier and 22.4.2 and earlier is affected by a stack overflow vulnerability due to insecure handling of a crafted PSD file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a...

CVE-2021-36005

Summary of CVE-2021-36005 : Adobe Photoshop versions 21.2.9 and earlier, and 22.4.2 and earlier, are affected by a stack overflow caused by insecure handling of a crafted PSD file. The issue could lead to arbitrary code execution in the context of the current user. Exploitation requires user inte...

CVE-2021-36005 Adobe Photoshop PSD File Parsing Stack Overflow Vulnerability

Adobe Photoshop versions 21.2.9 and earlier and 22.4.2 and earlier is affected by a stack overflow vulnerability due to insecure handling of a crafted PSD file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a...

The vulnerability of the ReadPSDLayersInternal function in the coders/psd.c component of the console image editing tool ImageMagick, related to a lack of input data validation mechanism, allows attackers to trigger a service failure.

The vulnerability of the ReadPSDLayersInternal function in the ImageMagick console graphics editor’s coders/psd.c file is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially crafted file...

CVE-2021-21795

A heap-based buffer overflow vulnerability exists in the PSD readiccicCurvedata functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to an integer overflow that, in turn, leads to a heap buffer overflow. An attacker can provide a malicious file to trigger this...

Heap overflow

A heap-based buffer overflow vulnerability exists in the PSD readiccicCurvedata functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to an integer overflow that, in turn, leads to a heap buffer overflow. An attacker can provide a malicious file to trigger this...

CVE-2021-21795

The CVE-2021-21795 issue affects Accusoft ImageGear 19.9, specifically the PSD read_icc_icCurve_data function. A misparsed PSD tag counts value (curve_data->count) is read from the file; when count is large (e.g., 0x80000001), the code allocates buffer_for_curves_values using count <

CVE-2021-21795

A heap-based buffer overflow vulnerability exists in the PSD readiccicCurvedata functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to an integer overflow that, in turn, leads to a heap buffer overflow. An attacker can provide a malicious file to trigger this...

CVE-2021-27640

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-27640

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

Input validation

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-27640

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

SUSE: Security Advisory (SUSE-SU-2014:0359-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-28675

An issue was discovered in Pillow before 8.2.0. PSDImagePlugin.PsdImageFile lacked a sanity check on the number of input layers relative to the size of the data block. This could lead to a DoS on Image.open prior to Image.load...

PYSEC-2021-139

An issue was discovered in Pillow before 8.2.0. PSDImagePlugin.PsdImageFile lacked a sanity check on the number of input layers relative to the size of the data block. This could lead to a DoS on Image.open prior to Image.load...

GHSA-3264-3FM9-FG44 Infinite Loop in Apache Tika

A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23...

GHSA-3H29-52VH-PQGR Uncontrolled Resource Consumption in Apache Tika

A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23...

Fedora: Security Advisory for perl-Image-ExifTool (FEDORA-2021-e3d8833d36)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Pillow 资源管理错误漏洞

Pillow is a Python-based image processing library. A denial of service vulnerability exists in versions of Pillow prior to 8.2.0, which stems from the fact that PSDImagePlugin.PsdImageFile does not properly check the number of input layers based on data block size, and can be exploited by attacke...