The vulnerability of the ReadRLEImage function (coder/rle.c) in the cross-platform library for working with graphics in GraphicsMagick, allowing a hacker to cause a service failure.

The vulnerability of the ReadRLEImage function coder/rle.c in the cross-platform library for working with graphics in GraphicsMagick is related to a buffer overflow vulnerability. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created RLE fil...

Information Disclosure

apache arrow is vulnerable to information disclosure. The data read from Apache Parquet files with RLE null encoded data is uninitialized, potentially allowing data in memory to be unintentionally shared over the wire...

CVE-2019-12410

While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data from parquet. This affected the C++, Python, Ruby and R implementations. The uninitialized memory...

Vulnerability of the nsc_rle_decode() function in the RDP client FreeRDP, allowing a hacker to cause a service failure or execute arbitrary code

The vulnerability of the nscrledecode function in the RDP client FreeRDP is related to buffer overflow in memory. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code...

UBUNTU-CVE-2019-15143

In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error resource exhaustion caused by a GBitmap::readrleraw infinite loop by crafting a corrupted image file, related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp...

CVE-2019-11006

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadMIFFImage of coders/miff.c, which allows attackers to cause a denial of service or information disclosure via an RLE packet...

CVE-2019-11006

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadMIFFImage of coders/miff.c, which allows attackers to cause a denial of service or information disclosure via an RLE packet...

Heap overflow

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadMIFFImage of coders/miff.c, which allows attackers to cause a denial of service or information disclosure via an RLE packet...

CVE-2019-11006

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadMIFFImage of coders/miff.c, which allows attackers to cause a denial of service or information disclosure via an RLE packet...

CVE-2019-11006

In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadMIFFImage of coders/miff.c, which allows attackers to cause a denial of service or information disclosure via an RLE packet...

CVE-2019-11006

GraphicsMagick 1.4 snapshot-20190322 Q8 is affected by CVE-2019-11006 due to a heap-based buffer over-read in ReadMIFFImage (coders/miff.c). This can cause denial of service or information disclosure via crafted MIFF content, with CVSSv3 details indicating Critical impact (HIGH confidentiality/av...

PT-2019-5204 · Graphicsmagick +4 · Graphicsmagick +4

Name of the Vulnerable Software and Affected Versions: GraphicsMagick versions 1.4 snapshot-20190322 Q8 Description: The issue is related to a heap-based buffer over-read in the ReadMIFFImage function, which can be exploited by remote attackers to cause a denial of service or disclose information...

freerdp: Out-of-bounds write in nsc_rle_decode() function

A flaw was found in freerdp in versions before 2.0.0-rc4. An out-of-bounds write of up to 4 bytes in the nscrledecode function results in a memory corruption. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

FreeRDP Out-of-Bounds Write Vulnerability

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. An out-of-bounds write vulnerability in the 'nscrledecode' function in versions prior to FreeRDP 2.0.0-rc4 can be exploited by a remote attacker to cause a denial of service memory...

DEBIAN-CVE-2018-8788

FreeRDP prior to version 2.0.0-rc4 contains an Out-Of-Bounds Write of up to 4 bytes in function nscrledecode that results in a memory corruption and possibly even a remote code execution...

XnView Multiple Denial of Service Vulnerabilities (Aug 2018)

XnView is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xnview:xnview";...

CVE-2018-15176

XnView 2.45 allows remote attackers to cause a denial of service User Mode Write AV starting at MSVCR120!memcpy+0x0000000000000074 and application crash or possibly have unspecified other impact via a crafted RLE file...

CVE-2018-15175

XnView 2.45 allows remote attackers to cause a denial of service User Mode Write AV starting at Qt5Core!QVariant::QVariant+0x0000000000000014 and application crash or possibly have unspecified other impact via a crafted RLE file...

CVE-2018-15176

XnView 2.45 allows remote attackers to cause a denial of service User Mode Write AV starting at MSVCR120!memcpy+0x0000000000000074 and application crash or possibly have unspecified other impact via a crafted RLE file...

Code injection

XnView 2.45 allows remote attackers to cause a denial of service User Mode Write AV starting at MSVCR120!memcpy+0x0000000000000074 and application crash or possibly have unspecified other impact via a crafted RLE file...