PYSEC-2021-71

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

pillow:fuzz_pillow: Heap-buffer-overflow in read4B

Project: https://github.com/python-pillow/Pillow.git Detailed Report: https://oss-fuzz.com/testcase?key=5730089102868480 Project: pillow Fuzzing Engine: libFuzzer Fuzz Target: fuzzpillow Job Type: libfuzzerasanpillow Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

DEBIAN-CVE-2020-11538

In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311...

PT-2020-12675 · Pillow +5 · Pillow +5

Name of the Vulnerable Software and Affected Versions: Pillow versions prior to 7.0.1 Description: The issue exists in the parsing of SGI image files, where a number of out-of-bounds reads are present in the libImaging/SgiRleDecode.c module. Recommendations: For versions prior to 7.0.1, update to...

DEBIAN-CVE-2020-5311

libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow...

UBUNTU-CVE-2020-5311

libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow...

Vulnerability of the nsc_rle_decode() function in the RDP client FreeRDP, allowing a hacker to cause a service failure or execute arbitrary code

The vulnerability of the nscrledecode function in the RDP client FreeRDP is related to buffer overflow in memory. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code...

freerdp: Out-of-bounds write in nsc_rle_decode() function

A flaw was found in freerdp in versions before 2.0.0-rc4. An out-of-bounds write of up to 4 bytes in the nscrledecode function results in a memory corruption. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

FreeRDP Out-of-Bounds Write Vulnerability

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. An out-of-bounds write vulnerability in the 'nscrledecode' function in versions prior to FreeRDP 2.0.0-rc4 can be exploited by a remote attacker to cause a denial of service memory...

DEBIAN-CVE-2018-8788

FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nscrledecode that results in a memory corruption and possibly even a remote code execution...

PT-2018-3041

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 2.0.0-rc4 Description The issue is related to an Out-Of-Bounds Write of up to 4 bytes in the nsc rle decode function, resulting in memory corruption and potentially allowing for remote code execution. This can be...

PT-2013-2662

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.0.4 FFmpeg versions 1.1.x prior to 1.1.2 Description A buffer overflow issue exists in the rle decode function, located in libavcodec/sanm.c, which can be triggered by crafted LucasArts Smush video data. This allows...