Lucene search
K

2533 matches found

OSV
OSV
added 2023/10/13 11:6 a.m.5 views

OESA-2023-1733 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

6.2CVSS6.8AI score0.00437EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/10/09 12:0 a.m.24 views

Foxit Reader < 9.1 Multiple Vulnerabilities

According to its version, the Foxit Reader application installed on the remote Windows host is prior to 9.1. It is, therefore affected by multiple vulnerabilities: - In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, a flaw exists within the parsing of the BITMAPINFOHEADER record in BMP...

8.8CVSS7.6AI score0.24033EPSS
Exploits21References19
CNNVD
CNNVD
added 2023/10/02 12:0 a.m.3 views

ImageMagick Resource Management Error Vulnerability

ImageMagick is a set of open-source image processing software from the American company ImageMagick. The software can read, convert or write images in a variety of formats. A security vulnerability exists in ImageMagick, which stems from a post-release reuse vulnerability in coders/bmp.c. The...

6.2CVSS6.9AI score0.00437EPSS
Exploits0References8
SUSE CVE
SUSE CVE
added 2023/09/30 1:58 a.m.2 views

SUSE CVE-2023-5175

During process shutdown, it was possible that an ImageBitmap was created that would later be used after being freed from a different codepath, leading to a potentially exploitable crash. This vulnerability affects Firefox 118...

9.8CVSS6.7AI score0.00835EPSS
Exploits0References4
OSV
OSV
added 2023/08/22 7:16 p.m.1 views

DEBIAN-CVE-2020-21427

Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file...

7.8CVSS7.8AI score0.00542EPSS
Exploits0References1
OSV
OSV
added 2023/08/22 7:16 p.m.1 views

UBUNTU-CVE-2020-21427

Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file...

7.8CVSS6AI score0.00542EPSS
Exploits0References4
OSV
OSV
added 2023/08/11 2:15 p.m.2 views

CVE-2021-28835

Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file...

7.8CVSS6.1AI score0.00318EPSS
Exploits0References2
NVD
NVD
added 2023/08/11 2:15 p.m.23 views

CVE-2021-28835

Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file...

7.8CVSS7.8AI score0.00318EPSS
Exploits0References2
Prion
Prion
added 2023/08/11 2:15 p.m.22 views

Buffer overflow

Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file...

4.4CVSS7.8AI score0.00318EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/11 12:0 a.m.12 views

CVE-2021-28835

Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file...

7.8CVSS7.7AI score0.00318EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/08/11 12:0 a.m.3 views

XnView Security Vulnerability

XnView is a suite of multi-platform image viewing software from the French individual developer Gougelet Pierre-emmanuel. The software can be used to view, convert, organize and edit graphics and video files. A security vulnerability exists in XNView prior to version 2.50, which stems from the...

7.8CVSS7.9AI score0.00318EPSS
Exploits0References3
Cvelist
Cvelist
added 2023/08/11 12:0 a.m.26 views

CVE-2021-28835

Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file...

7.8CVSS8AI score0.00318EPSS
Exploits0References2
CVE
CVE
added 2023/08/11 12:0 a.m.32 views

CVE-2021-28835

CVE-2021-28835 is a real vulnerability affecting XNView prior to 2.50. The available connected documents indicate a buffer overflow in the GEM bitmap file handling, enabling a local attacker to execute arbitrary code. The root cause is the overflow in GEM bitmap processing; the impact is describe...

7.8CVSS7.8AI score0.00318EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/07/13 11:15 p.m.4 views

CVE-2023-37836

libjpeg commit db33a6e was discovered to contain a reachable assertion via BitMapHook::BitMapHook at bitmaphook.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

6.5CVSS6.6AI score0.0051EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/07/13 12:0 a.m.3 views

PT-2023-25914 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a maliciou...

7.8CVSS7.3AI score0.00343EPSS
Exploits0References4
Fedora
Fedora
added 2023/07/05 1:19 a.m.19 views

[SECURITY] Fedora 37 Update: python-reportlab-4.0.4-2.fc37

This is the ReportLab PDF Toolkit. It allows rapid creation of rich PDF documents, and also creation of charts in a variety of bitmap and vector formats...

7.8CVSS7AI score0.02253EPSS
Exploits6
Fedora
Fedora
added 2023/06/30 1:23 a.m.25 views

[SECURITY] Fedora 38 Update: python-reportlab-4.0.4-2.fc38

This is the ReportLab PDF Toolkit. It allows rapid creation of rich PDF documents, and also creation of charts in a variety of bitmap and vector formats...

7.8CVSS7AI score0.02253EPSS
Exploits6
RedHat Linux
RedHat Linux
added 2023/06/06 8:50 a.m.2 views

kernel: KVM: VMX: Fix crash due to uninitialized current_vmcs

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Fix crash due to uninitialized currentvmcs KVM enables 'Enlightened VMCS' and 'Enlightened MSR Bitmap' when running as a nested hypervisor on top of Hyper-V. When MSR bitmap is updated, evmcstouchmsrbitmap function uses...

5.6AI score0.0016EPSS
Exploits0References5
OSV
OSV
added 2023/05/23 8:15 p.m.5 views

CVE-2023-23298

The Toybox.Graphics.BufferedBitmap.initialize API method in CIQ API version 2.3.0 through 4.1.7 does not validate its parameters, which can result in integer overflows when allocating the underlying bitmap buffer. A malicious application could call the API method with specially crafted parameters...

9.8CVSS7.4AI score0.01456EPSS
Exploits1References3
Prion
Prion
added 2023/05/23 8:15 p.m.15 views

Integer overflow

The Toybox.Graphics.BufferedBitmap.initialize API method in CIQ API version 2.3.0 through 4.1.7 does not validate its parameters, which can result in integer overflows when allocating the underlying bitmap buffer. A malicious application could call the API method with specially crafted parameters...

7.5CVSS9.3AI score0.01456EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder