Lucene search
+L

742 matches found

Cvelist
Cvelist
added 2022/07/29 7:1 p.m.27 views

CVE-2022-27865

A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files. This vulnerability may be exploited to execute arbitrary code...

8.2AI score0.0024EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/07/08 12:0 a.m.11 views

The vulnerability in the libImaging/TgaRleDecode.c component of the Pillow image processing library allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the libImaging/TgaRleDecode.c component of the Pillow image processing library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

10CVSS7.3AI score0.02262EPSS
SaveExploits1References5Affected Software2
CNVD
CNVD
added 2022/06/23 12:0 a.m.53 views

Autodesk AutoCAD Buffer Error Vulnerability (CNVD-2022-61610)

Autodesk AutoCAD is a professional 3D drawing software from Autodesk, Inc. A security vulnerability exists in Autodesk AutoCAD 2023 and prior versions, which stems from writing beyond the allocated buffer when parsing TGA files, and can be exploited by attackers to execute arbitrary code...

7.8CVSS5.4AI score0.00727EPSS
SaveExploits0References1
NVD
NVD
added 2022/06/21 3:15 p.m.22 views

CVE-2022-27870

A maliciously crafted TGA file in Autodesk AutoCAD 2023 may be used to write beyond the allocated buffer while parsing TGA file. This vulnerability may be exploited to execute arbitrary code...

7.8CVSS0.00727EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/06/21 3:15 p.m.3 views

CVE-2022-27870

A maliciously crafted TGA file in Autodesk AutoCAD 2023 may be used to write beyond the allocated buffer while parsing TGA file. This vulnerability may be exploited to execute arbitrary code...

7.8CVSS7.4AI score0.00727EPSS
SaveExploits0References2
OSV
OSV
added 2022/06/21 3:15 p.m.4 views

CVE-2022-27870

A maliciously crafted TGA file in Autodesk AutoCAD 2023 may be used to write beyond the allocated buffer while parsing TGA file. This vulnerability may be exploited to execute arbitrary code...

7.8CVSS7.5AI score0.00727EPSS
SaveExploits0References1
Prion
Prion
added 2022/06/21 3:15 p.m.23 views

Code injection

A maliciously crafted TGA file in Autodesk AutoCAD 2023 may be used to write beyond the allocated buffer while parsing TGA file. This vulnerability may be exploited to execute arbitrary code...

6.8CVSS7.9AI score0.00727EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/06/21 2:23 p.m.29 views

CVE-2022-27870

A maliciously crafted TGA file in Autodesk AutoCAD 2023 may be used to write beyond the allocated buffer while parsing TGA file. This vulnerability may be exploited to execute arbitrary code...

8.1AI score0.00727EPSS
SaveExploits0References1
CVE
CVE
added 2022/06/21 2:23 p.m.75 views

CVE-2022-27870

CVE-2022-27870 affects Autodesk AutoCAD 2023 (and prior AutoCAD versions per CNVD) and is caused by writing beyond the allocated buffer while parsing TGA files, enabling arbitrary code execution. The Red Hat entry reiterates the same description. CVSS scores are provided (2.0/3.1) with base score...

7.8CVSS7.9AI score0.00727EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/06/21 12:0 a.m.4 views

Autodesk AutoCAD 缓冲区错误漏洞

Autodesk AutoCAD is a professional 3D drawing software from Autodesk, Inc. A security vulnerability exists in Autodesk AutoCAD 2023 and prior versions, which stems from writing beyond the allocated buffer when parsing TGA files, and can be exploited by attackers to execute arbitrary code...

7.8CVSS6.3AI score0.00727EPSS
SaveExploits0References2
CNVD
CNVD
added 2022/06/07 12:0 a.m.60 views

Pillow Buffer Overflow Vulnerability (CNVD-2022-66671)

Pillow, a Python-based image processing library, is vulnerable to a buffer overflow vulnerability in Pillow version 9.1.0, which stems from a boundary error when processing TGA files. A remote attacker could exploit this vulnerability to pass specially designed data to the application, trigger a...

7.5CVSS6.9AI score0.02262EPSS
SaveExploits1Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/02 12:0 a.m.9 views

The vulnerability of the TGA file syntax analysis implementation in the Autodesk Design Review software lies in the ability to write beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the TGA file syntax analysis implementation in the Autodesk Design Review software relates to the writing beyond buffer boundaries in memory during DWG file syntax analysis. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context o...

9.3CVSS7.9AI score0.0148EPSS
SaveExploits0References4Affected Software2
Veracode
Veracode
added 2022/05/26 8:26 a.m.36 views

Heap-based Buffer Overflow

pillow is vulnerable to a heap buffer overflow. The vulnerability exists in the ImagingTgaRleDecode of TgaRleDecode.c due to a lack of input validation which allows an attacker to inject maliciously crafted tga image and crash the system...

9.8CVSS8.9AI score0.02262EPSS
SaveExploits1References4Affected Software2
Github Security Blog
Github Security Blog
added 2022/05/26 12:1 a.m.49 views

Buffer over-flow in Pillow

When reading a TGA file with RLE packets that cross scan lines, Pillow reads the information past the end of the first line without deducting that from the length of the remaining file data. This vulnerability was introduced in Pillow 9.1.0, and can cause a heap buffer overflow. Opening an image...

9.8CVSS8.9AI score0.02262EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2022/05/26 12:1 a.m.12 views

GHSA-HR8G-F6R6-MR22 Buffer over-flow in Pillow

When reading a TGA file with RLE packets that cross scan lines, Pillow reads the information past the end of the first line without deducting that from the length of the remaining file data. This vulnerability was introduced in Pillow 9.1.0, and can cause a heap buffer overflow. Opening an image...

8.7CVSS6.7AI score0.02262EPSS
SaveExploits1References6
OSV
OSV
added 2022/05/25 12:15 p.m.1 views

DEBIAN-CVE-2022-30595

libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files...

9.8CVSS7.8AI score0.02262EPSS
SaveExploits1References1
NVD
NVD
added 2022/05/25 12:15 p.m.18 views

CVE-2022-30595

libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files...

9.8CVSS0.02262EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/05/25 12:15 p.m.2 views

CVE-2022-30595

libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files...

9.8CVSS6AI score0.02262EPSS
SaveExploits1References3
Prion
Prion
added 2022/05/25 12:15 p.m.22 views

Heap overflow

libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files...

7.5CVSS9.6AI score0.02262EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
added 2022/05/25 12:15 p.m.31 views

CVE-2022-30595

libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files...

9.8CVSS7.1AI score0.02262EPSS
SaveExploits1References4
Rows per page
Query Builder