24 matches found
PYSEC-2025-128
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blendtransformedtiledargb.isra.0...
PYSEC-2025-128
lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blendtransformedtiledargb.isra.0...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write due to the component blendtransformedtiledargb.isra.0. Remediation A fix was pushed into the master branch but not yet published. References - GitHub Issue - PoC Credit: keepinggg...
PYSEC-2024-283
lunasvg v2.3.9 was discovered to contain an FPE Floating Point Exception at blendtransformedtiledargb.isra.0...
PYSEC-2024-283
lunasvg v2.3.9 was discovered to contain an FPE Floating Point Exception at blendtransformedtiledargb.isra.0...
lunasvg 安全漏洞
LunaSVG is a standalone C SVG rendering library by the individual developer Samuel Ugochukwu. A security vulnerability exists in lunasvg version v2.3.9, which stems from a floating point exception at blendtransformedtiledargb.isra.0...
FreeBSD : NVIDIA UNIX driver -- ARGB cursor buffer overflow in 'NoScanout' mode (1431f2d6-a06e-11e2-b9e0-001636d274f3)
NVIDIA Unix security team reports : When the NVIDIA driver for the X Window System is operated in 'NoScanout' mode, and an X client installs an ARGB cursor that is larger than the expected size 64x64 or 256x256, depending on the driver version, the driver will overflow a buffer. This can cause a...
USN-1799-1: NVIDIA graphics drivers vulnerability
It was discovered that the NVIDIA graphics drivers incorrectly handled large ARGB cursors. A local attacker could use this issue to gain root privileges. The NVIDIA graphics drivers have been updated to 304.88 to fix this issue. In addition to the security fix, the updated packages contain bug...
CVE-2013-0131
Buffer overflow in the NVIDIA GPU driver before 304.88, 310.x before 310.44, and 313.x before 313.30 for the X Window System on UNIX, when NoScanout mode is enabled, allows remote authenticated users to execute arbitrary code via a large ARGB cursor...
Buffer overflow
Buffer overflow in the NVIDIA GPU driver before 304.88, 310.x before 310.44, and 313.x before 313.30 for the X Window System on UNIX, when NoScanout mode is enabled, allows remote authenticated users to execute arbitrary code via a large ARGB cursor...
CVE-2013-0131
Buffer overflow in the NVIDIA GPU driver before 304.88, 310.x before 310.44, and 313.x before 313.30 for the X Window System on UNIX, when NoScanout mode is enabled, allows remote authenticated users to execute arbitrary code via a large ARGB cursor...
CVE-2013-0131
Buffer overflow in the NVIDIA GPU driver before 304.88, 310.x before 310.44, and 313.x before 313.30 for the X Window System on UNIX, when NoScanout mode is enabled, allows remote authenticated users to execute arbitrary code via a large ARGB cursor...
NVIDIA UNIX GPU driver ARGB cursor buffer overflow in "NoScanout" mode
Overview NVIDIA UNIX video drivers contain a buffer overflow vulnerability when run in NoScanout mode. Description The NVIDIA security advisory states:NVIDIA UNIX GPU Driver ARGB Cursor Buffer Overflow in "NoScanout" Mode. When the NVIDIA driver for the X Window System is operated in "NoScanout"...
Heap overflow
Multiple heap-based buffer overflows in imlib2 1.4.3 allow context-dependent attackers to execute arbitrary code via a crafted 1 ARGB, 2 XPM, or 3 BMP file, related to the IMAGEDIMENSIONSOK macro in lib/image.h...
CVE-2010-0991
CVE-2010-0991 affects imlib2 1.4.3, where heap-based buffer overflows can be triggered by crafted ARGB, XPM, or BMP files due to a logic error in the IMAGE_DIMENSIONS_OK macro in lib/image.h. This has been documented across multiple sources; some advisories note the issue and reference a fix in l...
Debian DSA-2029-1 : imlib2 - several vulnerabilities
It was discovered that imlib2, a library to load and process several image formats, did not properly process various image file types. Several heap and stack based buffer overflows - partly due to integer overflows - in the ARGB, BMP, JPEG, LBM, PNM, TGA and XPM loaders can lead to the execution ...
DEBIAN-CVE-2008-6079
imlib2 before 1.4.2 allows context-dependent attackers to have an unspecified impact via a crafted 1 ARGB, 2 BMP, 3 JPEG, 4 LBM, 5 PNM, 6 TGA, or 7 XPM file, related to "several heap and stack based buffer overflows - partly due to integer overflows."...
Apple QuickDraw libraries memory corruption
Memory corruption on maleformed PICT image ARGB record...
MOAB-23-01-2007: Apple QuickDraw GetSrcBits32ARGB() Memory Corruption Vulnerability
Summary Apple describes QuickDraw as follows: ...a collection of system software routines that your application can use to perform most image-manipulation operations on Macintosh computers. QuickDraw is integrated in Mac OS X since very early versions, used by Quicktime and any other application...
GLSA-200612-20 : imlib2: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200612-20 imlib2: Multiple vulnerabilities M. Joonas Pihlaja discovered several buffer overflows in loaderargb.c, loaderpng.c, loaderlbm.c, loaderjpeg.c, loadertiff.c, loadertga.c, loaderpnm.c and an out-of-bounds memory read acce...