cve-2018-8453-exp

cve-2018-8453-exp cve-2018-8453 exp Questo programma è un exploit per cve-2018-8453. Piattaforma di sviluppo\test: x86: windows 10 rs2 15063 x64: windos 10 rs2 16299 Nota: utilizza Palette per leggere/scrivere il kernel Avvertenza importante: questo strumento è destinato esclusivamente alla ricer...

CVE-2021-40449-Exploit

CVE-2021-40449-Exploit केवल विंडोज 10 14393, और विंडोज 10 17763 पर काम करता है पैलेट से स्प्रे करें और RtlSetAllBits से लिखें...

CVE-2020-17057

Eu escrevi este exp baseado neste blog（https://blogs.360.cn/post/CVE-2020-17057%20detail%20and%20exploit.html），Mas acabei apenas com objetos de paleta com ponteiro de dados pendente. Devido ao isolamento de tipo, não consigo obter primitivas R/W arbitrárias usando objetos de paleta ou bitmap. Se...

CVE-2025-64720-PoC

CVE-2025-64720: Overflow del buffer in libpng nella premoltiplicazione della palette Stato : Corretto Gravità : Alta ID CVE : CVE-2025-64720 Data di scoperta : 2025-11-XX Divulgazione pubblica : 2025-11-21 Panoramica Riepilogo Esiste una vulnerabilità di lettura fuori dai limiti nella funzione...

Astra Linux – Vulnerability in libpng1.6

LIBPNG is a reference library used in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.6.36 through 1.6.55, there was an out-of-bounds read and write vulnerability in libpng’s ARM/AArch64 Neon-optimized palette expansion path. When...

Astra Linux – Vulnerability in libpng1.6

LIBPNG is a reference library used in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to version 1.6.55, there was an out-of-bounds read vulnerability in the pngsetquantize API function. When this function is called without a histogram and th...

SUSE CVE-2026-16768

A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palet...

TencentOS Server 2: gstreamer1-plugins-bad-free, gstreamer1-plugins-base, and gstreamer1-plugins-good (TSSA-2026:0765)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0765 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

CVE-2026-16768

A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palet...

DEBIAN-CVE-2026-16768

A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palet...

EUVD-2026-48315

A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palet...

CVE-2026-16768 Gdk-pixbuf: out-of-bounds read in ico parser

A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palet...

CVE-2026-16768

A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palet...

CVE-2026-16768

CVE-2026-16768 affects the gdk-pixbuf ICO parser. A specially crafted ICO file with pixel values outside the defined palette range allows an out-of-bounds read due to insufficient bounds checking against the actual palette size. This causes heap bytes to be interpreted as valid palette indices an...

CVE-2026-16768 Gdk-pixbuf: out-of-bounds read in ico parser

A flaw was found in gdk-pixbuf. When parsing a specially crafted ICO file with pixel values that exceed the defined palette range, an out-of-bounds read can occur due to improper bounds checking against the actual palette size. This vulnerability causes heap bytes to be interpreted as valid palet...

PT-2026-64024

Name of the Vulnerable Software and Affected Versions gdk-pixbuf affected versions not specified Description An out-of-bounds read occurs when parsing a specially crafted ICO file. This happens because of improper bounds checking against the actual palette size when pixel values exceed the define...

TencentOS Server 2: gstreamer-plugins-base and gstreamer-plugins-good (TSSA-2026:0755)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0755 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

libpng security update

2:1.6.40-11.1 - fix CVE-2026-33416: use-after-free via pointer aliasing in pngsettRNS and pngsetPLTE RHEL-161329 - fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon RHEL-161213...

MiracleLinux 9 : gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free (AXSA:2026-1181:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1181:01 advisory. GStreamer: GStreamer: Arbitrary code execution via ASF file processing CVE-2026-2920 GStreamer: GStreamer: Remote Code Execution via heap-based buff...

CVE-2026-58049

FFmpeg's RASC video decoder decodedlta in libavcodec/rasc.c performs 32-bit reads and writes at the row cursor before the NEXTLINE row-boundary check and validates the DLTA region in pixel rather than byte units, so a DLTA run on a PAL8 frame can access several bytes past the row allocation. A...