bep/imagemeta allows a potentially large memory allocation in PNG and WebP parsing

Impact The buffer created for parsing metadata for PNG and WebP images was only bounded by their input data type, which could lead to potentially large memory allocation, and unreasonably high for image metadata. Before v0.11.0, If you didn't trust the input images, this could be abused to...

The vulnerability of the C/C++ Libstb library, related to reading beyond the allowed buffer data limits, allows a hacker to cause a service failure.

The vulnerability of the C/C++ Libstb library lies in reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially created file...

Linux Distros Unpatched Vulnerability : CVE-2019-19481

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates...

Intel Processors 缓冲区错误漏洞

Intel Processors are a family of processors from Intel Corporation USA. A buffer error vulnerability exists in Intel Processors that stems from the presence of incorrect buffer limits that could allow a privileged user to enable information disclosure via local access...

The vulnerability of the demuxer component in the FFmpeg multimedia library, which arises from reading data beyond the buffer’s acceptable limits, allows attackers to gain access to confidential data.

The vulnerability of the demuxer component in the FFmpeg multimedia library relates to reading data from buffer registers beyond their allowable limits. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data through a specially created ASF file...

Out-of-bounds Read

libfreerdp.so is vulnerable to Out-of-bounds Read. The vulnerability is due to improper handling of nWidth and nHeight when both are zero, This allowing an attacker to potentially access or modify memory outside the intended buffer limits...

Intel Thunderbolt DCH drivers security vulnerability

Intel Thunderbolt DCH drivers is a driver for Windows from Intel Corporation USA. A security vulnerability previously existed in Intel ThunderboltTM DCH drivers for Windows version 88, which arose from an improper buffer limit in the affected product. The vulnerability could allow an authenticate...

Intel NUC Security Vulnerability

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in the Intel NUC that stems from incorrect buffer limits in the BIOS firmware. It could allow a privileged user to potentially enable privileged escalation via local access...

Intel NUC Security Vulnerability

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in the Intel NUC that stems from incorrect buffer limits in the BIOS firmware. It could allow a privileged user to potentially enable privileged escalation via local access...

PT-2023-18421 · Intel +1 · Intel Qat Library +1

Name of the Vulnerable Software and Affected Versions: IntelR QAT Library versions prior to 22.07.1 Description: The issue is related to improper buffer restrictions, which may allow a privileged user to potentially enable information disclosure via local access. Recommendations: For versions pri...

The vulnerability of the decode_iptc_iim() function in the OpenImageIO image processing library allows a hacker to gain access to confidential data.

The vulnerability of the decodeiptciim function in the OpenImageIO image processing library is related to reading data from within the allowable buffer limits. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data through a specially created TIFF file...

Intel RealSense ID Buffer Error Vulnerability

Intel RealSense ID is a facial recognition solution from Intel Corporation USA that relies on its RealSense depth sensing technology. A security vulnerability exists in IntelR RealSenseTM 450 FA version 0.25.0, which stems from incorrect buffer limits. An attacker could exploit the vulnerability ...

The vulnerability of the Exiv2 metadata management library, related to reading beyond the allowed buffer data limits, allows a hacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library relates to reading data beyond the acceptable buffer limit. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through the use of a specially created image file...

The vulnerability in the vector graphic editor Inkscape, related to reading beyond the allowed buffer data limits, allows a hacker to gain access to confidential data.

The vulnerability in the vector graphic editor Inkscape relates to reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

SUSE CVE-2016-2570

The Edge Side Includes ESI parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during XML parsing, which allows remote HTTP servers to cause a denial of service assertion failure and daemon exit via a crafted XML document, related to esi/CustomParser.cc and...

The vulnerability of the FNT_Size_Request function in the FreeType library, which allows a hacker to trigger a service failure

The vulnerability of the FNTSizeRequest function in the FreeType library relates to reading data from within allowable buffer limits. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the Linux operating system’s kernel allows a hacker to gain access to confidential data and cause service interruptions.

The vulnerability of the Linux operating system’s kernel is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to access confidential data and also cause service failures...

The vulnerability of the tiffio.c component in the Leptonica image processing library allows a hacker to cause a service failure.

The vulnerability of the tiffio.c component in the Leptonica image processing library involves reading data from buffer fields beyond their acceptable limits. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

Intel NUC 缓冲区错误漏洞

The Intel NUC is a small minicomputer from Intel USA. A security vulnerability exists in versions prior to Intel NUC Laptop Kits BC0076, which stems from improper buffer limits in the firmware, and can be exploited by an attacker to potentially enable privileged escalation via local access...

The vulnerability of the `heif::Box_iref::get_references` function in the Libheif library for encoding and decoding HEIF and AVIF files involves reading data beyond the permissible buffer limits. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the heif::Boxiref::getreferences function in the HEIF and AVIF file encoding/decoding library Libheif lies in the reading of data beyond the permissible buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity...