Lucene search
+L

741 matches found

OSV
OSV
added 2022/05/25 12:15 p.m.3 views

UBUNTU-CVE-2022-30595

libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files...

9.8CVSS7.2AI score0.02262EPSS
SaveExploits1References5
CVE
CVE
added 2022/05/25 11:46 a.m.124 views

CVE-2022-30595

CVE-2022-30595 affects Pillow (Python Pillow library) v9.1.0, where libImaging/TgaRleDecode.c can trigger a heap-based buffer overflow when processing invalid TGA files. This is caused by improper handling in TgaRleDecode, with some sources describing potential remote code execution if exploited....

9.8CVSS9.5AI score0.02262EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/05/25 11:46 a.m.39 views

CVE-2022-30595

libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files...

9.9AI score0.02262EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
added 2022/05/25 11:46 a.m.98 views

CVE-2022-30595

libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files...

9.8CVSS9.8AI score0.02262EPSS
SaveExploits1
OSV
OSV
added 2022/05/25 11:46 a.m.30 views

CVE-2022-30595

libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files...

9.8CVSS9.7AI score0.02262EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2022/05/25 11:46 a.m.87 views

CVE-2022-30595

libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files...

9.8CVSS9.8AI score0.02262EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2022/05/18 10:30 p.m.43 views

CVE-2022-30595

A heap buffer overflow vulnerability was found in python-pillow. This security vulnerability occurs when reading a TGA file with RLE packets that cross scan lines, where pillow reads the information past the end of the first line without deducting that from the length of the remaining file data...

9.8CVSS2.5AI score0.02262EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/05/17 12:0 a.m.7 views

Pillow 缓冲区错误漏洞

Pillow, a Python-based image processing library, is vulnerable to a buffer overflow vulnerability in Pillow version 9.1.0, which stems from a boundary error when processing TGA files. A remote attacker could exploit this vulnerability to pass specially designed data to the application, trigger a...

9.8CVSS6.7AI score0.02262EPSS
SaveExploits1References6
NVD
NVD
added 2022/04/18 5:15 p.m.21 views

CVE-2022-27526

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

7.8CVSS0.0148EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/18 5:15 p.m.4 views

CVE-2022-27526

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

7.8CVSS6.1AI score0.0148EPSS
SaveExploits0References2
OSV
OSV
added 2022/04/18 5:15 p.m.3 views

CVE-2022-27526

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

7.8CVSS7.3AI score0.0148EPSS
SaveExploits0References1
Prion
Prion
added 2022/04/18 5:15 p.m.23 views

Memory corruption

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

6.8CVSS7.9AI score0.0148EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/04/18 4:20 p.m.87 views

CVE-2022-27526

The CVE-2022-27526 issue affects Autodesk Design Review. A maliciously crafted TGA file could trigger a memory corruption in DesignReview.exe, potentially enabling code execution in the context of the current process. Exploitation is consistent with a local attack requiring user interaction (per ...

7.8CVSS7.9AI score0.0148EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/18 4:20 p.m.28 views

CVE-2022-27526

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

8.2AI score0.0148EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/14 4:25 p.m.4 views

SUSE-SU-2022:14909-1 Security update for libcaca

This update for libcaca fixes the following issues: - CVE-2021-30499: Fixed a memory corruption issue when exporting troff sources bsc1184751. - CVE-2021-30498: Fixed a memory corruption issue when exporting TGA images bsc1184752...

7.8CVSS7.7AI score0.01353EPSS
SaveExploits2References5
Openbugbounty
Openbugbounty
added 2022/03/04 6:48 a.m.16 views

tga-annaberg.de Improper Access Control vulnerability OBB-2402515

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

0.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/02/12 12:0 a.m.31 views

EulerOS Virtualization 3.0.6.0 : gd (EulerOS-SA-2022-1065)

According to the versions of the gd package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - readheadertga in gdtga.c in the GD Graphics Library aka LibGD through 2.3.2 allows remote attackers to cause a denial of service...

7.5CVSS6.3AI score0.02051EPSS
SaveExploits2References3
NVD
NVD
added 2021/12/21 7:15 p.m.25 views

CVE-2021-44859

An out-of-bounds read vulnerability exists when reading a TGA file using Open Design Alliance Drawings SDK before 2022.12. The specific issue exists after loading TGA files. An unchecked input data from a crafted TGA file leads to an out-of-bounds read. An attacker can leverage this vulnerability...

7.8CVSS0.00817EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/21 7:15 p.m.8 views

CVE-2021-44859

An out-of-bounds read vulnerability exists when reading a TGA file using Open Design Alliance Drawings SDK before 2022.12. The specific issue exists after loading TGA files. An unchecked input data from a crafted TGA file leads to an out-of-bounds read. An attacker can leverage this vulnerability...

7.8CVSS7.2AI score0.00817EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/21 7:15 p.m.20 views

Out-of-bounds

An out-of-bounds read vulnerability exists when reading a TGA file using Open Design Alliance Drawings SDK before 2022.12. The specific issue exists after loading TGA files. An unchecked input data from a crafted TGA file leads to an out-of-bounds read. An attacker can leverage this vulnerability...

6.8CVSS7.5AI score0.00817EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder