Lucene search
+L

70 matches found

OSV
OSV
added 2026/07/14 3:43 p.m.8 views

CVE-2026-59203 Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service

Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a negative byte count in the %%BeginBinary directive, allowing a crafted EPS file to cause Image.open to seek backwards to the same directive and parse it repeatedly in an infinite...

5.3CVSS6.1AI score
SaveExploits0References6
Debian CVE
Debian CVE
added 2026/07/14 3:43 p.m.11 views

CVE-2026-59203

Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a negative byte count in the %%BeginBinary directive, allowing a crafted EPS file to cause Image.open to seek backwards to the same directive and parse it repeatedly in an infinite...

7.5CVSS5.3AI score0.00399EPSS
SaveExploits1
CVE
CVE
added 2026/07/14 3:43 p.m.59 views

CVE-2026-59203

Pillow (Python imaging library) 12.0.0–12.2.0 is affected by an issue in the EPS parser (PIL/EpsImagePlugin.py) where a negative byte count in the %%BeginBinary directive allows an EPS file to cause Image.open() to seek backwards to the same directive and repeatedly parse it, creating an infinite...

7.5CVSS6.1AI score0.00399EPSS
SaveExploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/07/01 12:0 a.m.11 views

openSUSE 16 Security Update : giflib (openSUSE-SU-2026:21076-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21076-1 advisory. This update for giflib fixes the following issue - CVE-2026-26740: heap out-of-bounds read when processing a specially crafted GIF file containing a GCE...

8.2CVSS7.2AI score0.00618EPSS
SaveExploits1References3
OSV
OSV
added 2026/06/28 9:26 a.m.8 views

OPENSUSE-SU-2026:21076-1 Security update for giflib

This update for giflib fixes the following issue - CVE-2026-26740: heap out-of-bounds read when processing a specially crafted GIF file containing a GCE block with a truncated extension byte count bsc1259836...

8.2CVSS5.8AI score0.00618EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/06/27 12:0 a.m.20 views

SUSE SLED15 / SLES15 Security Update : giflib (SUSE-SU-2026:2666-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2666-1 advisory. This update for giflib fixes the following issue - CVE-2026-26740: heap out-of-bounds read when processing a specially...

8.2CVSS7.2AI score0.00618EPSS
SaveExploits1References4
OSV
OSV
added 2026/06/26 2:8 p.m.7 views

SUSE-SU-2026:2667-1 Security update for giflib

This update for giflib fixes the following issue - CVE-2026-26740: heap out-of-bounds read when processing a specially crafted GIF file containing a GCE block with a truncated extension byte count bsc1259836...

8.2CVSS5.8AI score0.00618EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/06/23 12:0 a.m.30 views

PT-2026-58091

Name of the Vulnerable Software and Affected Versions Pillow versions 12.0.0 through 12.2.0 Description The EPS parser in PIL/EpsImagePlugin.py accepts a negative byte count within the %%BeginBinary directive. A specially crafted EPS file can trigger the Image.open function to seek backwards to t...

7.5CVSS6.1AI score0.00399EPSS
SaveExploits1References11
RedhatCVE
RedhatCVE
added 2026/06/05 7:49 p.m.16 views

CVE-2026-29972

nanoMODBUS through v1.22.0 has a stack-based buffer overflow in recvreadregistersres in nanomodbus.c. When a client calls nmbsreadholdingregisters or nmbsreadinputregisters, the library writes register data from the server response to the caller-provided buffer based on the response's bytecount...

8.2CVSS6.3AI score0.00639EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/08 6:31 p.m.20 views

EUVD-2026-28785

nanoMODBUS through v1.22.0 has a stack-based buffer overflow in recvreadregistersres in nanomodbus.c. When a client calls nmbsreadholdingregisters or nmbsreadinputregisters, the library writes register data from the server response to the caller-provided buffer based on the response's bytecount...

8.2CVSS6.4AI score0.00639EPSS
SaveExploits0References4
NVD
NVD
added 2026/05/08 4:16 p.m.32 views

CVE-2026-29972

nanoMODBUS through v1.22.0 has a stack-based buffer overflow in recvreadregistersres in nanomodbus.c. When a client calls nmbsreadholdingregisters or nmbsreadinputregisters, the library writes register data from the server response to the caller-provided buffer based on the response's bytecount...

8.2CVSS0.00639EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/08 12:0 a.m.11 views

CVE-2026-29972

nanoMODBUS through v1.22.0 has a stack-based buffer overflow in recvreadregistersres in nanomodbus.c. When a client calls nmbsreadholdingregisters or nmbsreadinputregisters, the library writes register data from the server response to the caller-provided buffer based on the response's bytecount...

8.2CVSS6.4AI score0.00639EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/05/08 12:0 a.m.10 views

CVE-2026-29972

nanoMODBUS through v1.22.0 has a stack-based buffer overflow in recvreadregistersres in nanomodbus.c. When a client calls nmbsreadholdingregisters or nmbsreadinputregisters, the library writes register data from the server response to the caller-provided buffer based on the response's bytecount...

6.4AI score0.00639EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/08 12:0 a.m.25 views

PT-2026-39142

Name of the Vulnerable Software and Affected Versions nanoMODBUS versions prior to 1.23.0 Description A stack-based buffer overflow exists in the recv read registers res function within nanomodbus.c. This occurs when a client invokes nmbs read holding registers or nmbs read input registers, as th...

8.2CVSS6.4AI score0.00639EPSS
SaveExploits0References6
CVE
CVE
added 2026/05/08 12:0 a.m.27 views

CVE-2026-29972

Affected software: nanoMODBUS library (v1.22.0 and earlier as described). Vulnerability: a stack-based buffer overflow in recv_read_registers_res() within nanomodbus.c when performing nmbs_read_holding_registers() or nmbs_read_input_registers(). The code writes register data from the server respo...

8.2CVSS6.4AI score0.00639EPSS
SaveExploits0References3
OSV
OSV
added 2026/05/08 12:0 a.m.11 views

CVE-2026-29972

nanoMODBUS through v1.22.0 has a stack-based buffer overflow in recvreadregistersres in nanomodbus.c. When a client calls nmbsreadholdingregisters or nmbsreadinputregisters, the library writes register data from the server response to the caller-provided buffer based on the response's bytecount...

8.2CVSS6.6AI score
SaveExploits0References5
EUVD
EUVD
added 2026/03/01 9:32 a.m.13 views

EUVD-2026-9122

A vulnerability has been found in wren-lang wren up to 0.4.0. Affected by this issue is the function getByteCountForArguments of the file src/vm/wrencompiler.c. Such manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to...

4.8CVSS5.4AI score0.00163EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2026/03/01 12:0 a.m.15 views

wren 代码问题漏洞

Wren is a concurrent scripting language developed by Wren OpenSource. Versions of Wren 0.4.0 and earlier had code-related vulnerabilities. These vulnerabilities stemmed from a null pointer dereferencing issue in the function getByteCountForArguments located in the file src/vm/wrencompiler.c...

5.5CVSS5.7AI score0.00163EPSS
SaveExploits1References6
OSV
OSV
added 2025/10/07 3:21 p.m.12 views

CVE-2022-50541 dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma: Reset UDMACHANRT byte counters to prevent overflow UDMACHANRTBCNTREG stores the real-time channel bytecount statistics. These registers are 32-bit hardware counters and the driver uses these counters to...

6.7AI score
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2005-1045

Malware in sbrugna...

7.5CVSS6AI score0.04016EPSS
SaveExploits0References13
Rows per page
Query Builder