CVE-2024-57719

Technical details about CVE-2024-57719 (affected components, root cause, and patch specifics) are not provided in the connected documents; Fedora advisories reference lunasvg/imhex and list the CVE but do not disclose the technical details.

CVE-2024-57721

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovgpathaddpath...

CVE-2024-57721

CVE-2024-57721 concerns lunasvg v3.0.0 where a segmentation fault occurs in the plutovg_path_add_path path. The Fedora advisories link this to the lunasvg/plutovg integration, and recommend unbundling plutovg from lunasvg, updating lunasvg to use the plutovg version already in the repository, and...

CVE-2024-55193

OpenImageIO v3.1.0.0dev was discovered to contain a segmentation violation via the component /OpenImageIO/stringview.h...

CVE-2024-57724

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component grayrecordcell...

CVE-2024-57724

CVE-2024-57724 affects lunasvg in Fedora environments via the Lun aSVG/ImHex stack. The initial report describes a segmentation fault in lunasvg’s gray_record_cell, with linked advisories noting that lunasvg must be updated and pluto vg unbundled to fix multiple CVEs and to rebuild imhex for the ...

LunaSVG 安全漏洞

LunaSVG is a standalone C SVG rendering library. A security vulnerability exists in LunaSVG that stems from the component blendtransformedtiledargb.isra.0 containing a segmentation violation. No detailed vulnerability details are provided at this time...

CVE-2024-55193

OpenImageIO v3.1.0.0dev was discovered to contain a segmentation violation via the component /OpenImageIO/stringview.h...

CVE-2024-57723

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component compositionsourceover...

CVE-2024-57720

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovgblend...

CVE-2024-57721

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovgpathaddpath...

CVE-2024-57723

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component compositionsourceover...

CVE-2024-57723

CVE-2024-57723 affects lunasvg and is reflected in Fedora advisories for lunasvg/imhex (Fedora 42–44 updates). The segmentation fault in composition_source_over is addressed by updating lunasvg to a newer version and by unbundling/consuming the bundled plutovg in the ecosystem, followed by rebuil...

CVE-2024-57720

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovgblend...

CVE-2024-57720

CVE-2024-57720 affects lunasvg v3.0.0 with a segmentation fault in the plutovg_blend component. The CVSSv3.1 base score is 6.5 (MEDIUM) with network attack vector, low attack complexity, no privileges required, user interaction required, and high impact to availability. Fedora advisories describe...

CVE-2024-55193

OpenImageIO v3.1.0.0dev contains a segmentation fault caused by the string_view.h component. The issue is framed as a boundary issue in OpenImageIO/string_view.h that leads to a crash (segmentation violation). The connected documents corroborate the same basic details, with no additional exploita...

CVE-2024-57721

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovgpathaddpath...

CVE-2024-57724

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component grayrecordcell...

CVE-2024-57719

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blendtransformedtiledargb.isra.0...

Debian dla-3700 : libcjson-dev - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3700 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3700-1 [email protected] https://www.debian.org/lts/security/...