PT-2026-64103

Summary Pillow's TGA RLE encoder reads past its row buffer when saving a mode "1" image. Adjacent process heap bytes can be copied into the generated TGA file. The bug is reachable through the public save API: python im.saveout, format="TGA", compression="tga rle" Older affected Pillow versions u...

PT-2026-58089

Name of the Vulnerable Software and Affected Versions Pillow versions 5.2.0 through 12.2.x Description The TGA RLE encoder in the Pillow Python imaging library reads past its packed row buffer when saving a mode 1 image using TGA RLE compression. This behavior allows adjacent process heap bytes t...

Linux Distros Unpatched Vulnerability : CVE-2024-28581

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the assignPixel function when readin...

gimp: Multiple heap buffer overflows in TGA parser

A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing a heap buffer overflow...

gimp: Multiple heap buffer overflows in TGA parser

A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing a heap buffer overflow...

CVE-2024-28581

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the assignPixel function when reading images in TARGA format...

CVE-2024-28581

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the assignPixel function when reading images in TARGA format...

DEBIAN-CVE-2024-28581

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the assignPixel function when reading images in TARGA format...

UBUNTU-CVE-2024-28581

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the assignPixel function when reading images in TARGA format...

CVE-2024-28581

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the assignPixel function when reading images in TARGA format...

CVE-2024-28581

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the assignPixel function when reading images in TARGA format...

CVE-2024-28581

The open-source FreeImage v.3.19.0 [r1909] library is affected by a buffer overflow vulnerability. The flaw occurs because the program fails to properly validate the length and size of input data when reading images in TARGA format . A local attacker can exploit this via the _assignPixel() functi...

CVE-2024-28581

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the assignPixel function when reading images in TARGA format...

PT-2024-22485 · Freeimage +1 · Freeimage +1

Name of the Vulnerable Software and Affected Versions: FreeImage version 3.19.0 Description: The issue allows a local attacker to execute arbitrary code via the assignPixel function when reading images in TARGA format. This is a Buffer Overflow vulnerability. Recommendations: For FreeImage versio...

OpenImageIO 缓冲区错误漏洞

OpenImageIO is an image read and write library that also provides several tools and applications. A stack buffer overflow vulnerability exists in the TGA file format parser in OpenImageIO v2.3.19.0. An attacker could exploit this vulnerability to cause out-of-bounds writes and arbitrary code...

Memory Corruption Vulnerability in Quick Clip's Handling of TGA Format Images

Quick Clip is a video editing tool from 360. FastClip has a memory corruption vulnerability in the handling of TGA format images, which can be exploited by attackers to cause the program to crash by constructing a malformed TGA format file...