Input validation

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6356

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6356

SAP 3D Visual Enterprise Viewer 9 is affected by CVE-2020-6356 via a BMP file parsing vulnerability. The issue, caused by improper input validation, can lead to an out-of-bounds write and remote code execution when a user opens a crafted BMP file from untrusted sources; exploits require user inte...

CVE-2020-6350

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6346

SAP 3D Visual Enterprise Viewer (VEV) 9 contains a BMP parsing flaw that leads to memory corruption and potential remote code execution. The root cause is improper input validation during BMP file parsing, with exploitation requiring user interaction (opening a malicious BMP). This vulnerability ...

CVE-2020-6346

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6339

SAP 3D Visual Enterprise Viewer 9 is affected by a BMP parsing vulnerability caused by improper input validation. The flaw resides in the BMP file handling and can crash the application (availability impact). In at least one connected source (ZDI), the issue is described as a heap-based buffer ov...

CVE-2020-6339

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

EulerOS 2.0 SP8 : libjpeg-turbo (EulerOS-SA-2020-1862)

According to the versions of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The tjLoadImage function in libjpeg-turbo 2.0.1 has an integer overflow with a resultant heap-based buffer overflow via a BMP image becau...

Debian DLA-2302-1 : libjpeg-turbo security update

Several vulnerabilities were fixed in libjpeg-turbo, a widely used library for handling JPEG files. CVE-2018-1152 Denial of service vulnerability caused by a divide by zero when processing a crafted BMP image in TJBench. CVE-2018-14498 Denial of service heap-based buffer over-read and application...

ffjpeg buffer overflow vulnerability (CNVD-2020-31582)

ffjpeg is a JPEG encoder/decoder. A security vulnerability exists in the bmpload of the bmp.c file in ffjpeg version 2020-02-24 and earlier. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2020-13440

ffjpeg through 2020-02-24 has an invalid write in bmpload in bmp.c...

Out-of-bounds read in TensorFlow possibly causing disclosure of the contents of process memory.

TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decodebmpop.cc...

Updated qt4 packages fix security vulnerabilities

Updated qt4 packages fix security vulnerabilities: A double-free or corruption during parsing of a specially crafted illegal XML document CVE-2018-15518. A malformed SVG image could cause a segmentation fault in qsvghandler.cpp CVE-2018-19869. A malformed GIF image might have caused a NULL pointe...

The vulnerability of the ReadBMPImage function in the GraphicsMagick graphics editor allows an attacker to trigger a service failure by reading beyond the buffer boundaries in memory.

The vulnerability of the ReadBMPImage function in the GraphicsMagick graphics editor is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially created BMP file...

Google TensorFlow Buffer Overflow Vulnerability (CNVD-2020-35399)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A buffer overflow vulnerability exists in the DecodeBmp function of the BMP decoder in the core/kernels/decodebmpop.cc file in Google TensorFlow versions prior to 1.7.0. An attacker can exploit...

CVE-2018-21233

TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decodebmpop.cc...

CVE-2018-21233

TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decodebmpop.cc...

Integer overflow

TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decodebmpop.cc...

PYSEC-2020-304

TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decoder in core/kernels/decodebmpop.cc...