CVE-2013-2729

Adobe Reader BMP/RLE ヒープ破損 - CVE-2013-2729 Adobe Reader X は、Adobe Systems が開発した、Portable Document Format PDF ファイルの表示、作成、編集、印刷、管理を行うための強力なソフトウェアソリューションです。バージョン 10 以降には、Google Chrome と同様のサンドボックステクノロジーである Protected Mode が含まれており、製品全体のセキュリティが向上しています。 Title: Adobe Reader BMP/RLE heap corruption CVE Nam...

zsteg

zsteg 描述 检测 PNG 和 BMP 中通过隐写隐藏的数据 安装 gem install zsteg 可检测： PNG 和 BMP 中的 LSB 隐写 zlib 压缩数据 OpenStego Camouflage 1.2.1 使用埃拉托斯特尼集合的 LSB 用法 zsteg -h Usage: zsteg options filename.png paramstring -a, --all try all known methods -E, --extract NAME extract specified payload, NAME is like '1b,rgb,lsb'...

CVE-2026-71972 U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder

U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the videodisplayrle8bitmap function in drivers/video/videobmp.c. Attackers can supply a crafted RLE8-compressed BMP image to corrupt memory adjacent to the framebuffer and crash the bootloader...

CVE-2026-71972 U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder

U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the videodisplayrle8bitmap function in drivers/video/videobmp.c. Attackers can supply a crafted RLE8-compressed BMP image to corrupt memory adjacent to the framebuffer and crash the bootloader...

CVE-2026-71972

U-Boot versions through 2026.10-rc5 are affected by an out-of-bounds write vulnerability in the video_display_rle8_bitmap function located in drivers/video/video_bmp.c. An attacker can exploit this by providing a crafted RLE8-compressed BMP image , which can lead to memory corruption adjacent to ...

CVE-2019-8014

CVE-2019-8014 の簡単な分析です。 Poc と exp を含みます。 Shellcode は電卓または CMD ウィンドウを表示するものです。覚えていません。 注意： my.7z は脆弱性をトリガーするために必要な bmp 画像です。ファイルが大きすぎたので圧縮しました。...

CVE-2013-3664_BMP

Sketchup BMP Material RLE4 ヒープオーバーフロー - CVE-2013-3664 SketchUpは、埋め込まれたBMP RLE4圧縮テクスチャを解析する際に入力を検証しない。悪意のあるテクスチャ、サムネイル、または背景画像がヒープオーバーフローを引き起こすと、任意のコード実行が可能になることが証明されている。この問題は、Windows Explorerが.skpファイル内の埋め込みサムネイルを読み取った場合にも引き起こされる可能性がある。 概要 タイトル: Sketchup BMP Material RLE4 ヒープオーバーフロー CVE ID:...

LogoFail-PoC

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 我们要求安全归还所有被恐怖组织哈马斯劫持为人质的公民。在所有的人质获释并安全回家之前，我们不会休息。你可以帮助他们回家。https://stories.bringthemhomenow.net/ BIOS 镜像解析器漏洞利用工具 💻 该工具演示了如何利用 BIOS 镜像解析器中的缓冲区溢出漏洞。它仅用于教育目的。 概述 ℹ️ 该漏洞利用针对 BIOS 固件镜像解析器函数 parseimage 中一个假设的缓冲区溢出漏洞。该漏洞允许攻击者构造一个恶意的 BMP 图像文件，在启动过程中触发缓冲区溢出并执行任意代码。 使用方法...

CVE-2026-50291

A flaw was found in OpenImageIO, a toolset for image file manipulation. A remote attacker could exploit this vulnerability by providing a specially crafted BMP Bitmap image file. Processing this malicious file can lead to an invalid read operation during image decoding, causing the application to...

Linux Distros Unpatched Vulnerability : CVE-2026-50291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to versions 3.0.16.0 and...

CVE-2026-50291

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to versions 3.0.16.0 and 3.1.11.0, processing a crafted BMP file through oiiotool or an application linked to OpenImageIO can reach BMP palette handling in...

UBUNTU-CVE-2026-50291

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to versions 3.0.16.0 and 3.1.11.0, processing a crafted BMP file through oiiotool or an application linked to OpenImageIO can reach BMP palette handling in...

CVE-2026-50291

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to versions 3.0.16.0 and 3.1.11.0, processing a crafted BMP file through oiiotool or an application linked to OpenImageIO can reach BMP palette handling in...

CVE-2026-50291 OpenImageIO: Segmentation Fault in BmpInput::read_native_scanline (bmpinput.cpp:399)

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to versions 3.0.16.0 and 3.1.11.0, processing a crafted BMP file through oiiotool or an application linked to OpenImageIO can reach BMP palette handling in...

CVE-2026-50291

OpenImageIO , a toolset for reading and writing image files used in VFX/animation, is vulnerable to a segmentation fault in BmpInput::read_native_scanline (src/bmp.imageio/bmpinput.cpp:399) prior to versions 3.0.16.0 and 3.1.11.0 . When a crafted BMP file with an empty color table is processed th...

CVE-2026-50291: Out-of-bounds Read

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to versions 3.0.16.0 and 3.1.11.0, processing a crafted BMP file through oiiotool or an application linked to OpenImageIO can reach BMP palette handling in...

Astra Linux – Vulnerability in imagemagick

A heap use-after-free flaw was discovered in the coder/bmp.c file of ImageMagick...

Astra Linux – Vulnerability in imagemagick

A flaw was discovered in ImageMagick, specifically in the code file coders/bmp.c. An attacker who submits a crafted file processed by ImageMagick could trigger undefined behavior, resulting in values that are outside the range of the type unsigned int. This likely leads to a disruption in the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: SDL (UTSA-2023-003818)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003818 advisory. SDL Simple DirectMedia Layer through 2.0.12 has an Integer Overflow and resultant SDLmemcpy heap corruption in SDLBlitCopy in video/SDLblitcopy.c via a crafted .BMP...

golang.org/x/image/bmp: golang: golang.org/x/image/bmp: Denial of Service via out-of-range palette index in BMP decoding

A flaw was found in golang.org/x/image/bmp. A remote attacker could exploit this vulnerability by providing a specially crafted paletted BMP Bitmap file. Decoding this file with an out-of-range palette index causes the application to panic when accessing invalid image pixels, leading to a Denial ...