Lucene search
K

15 matches found

RedHat Linux
RedHat Linux
added 2026/05/19 4:24 p.m.10 views

gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for...

7.5CVSS7.3AI score0.00867EPSS
Exploits1References5
Packet Storm News
Packet Storm News
added 2026/05/11 12:0 a.m.3 views

A Systematic Security Testing Approach for InterUSS-Based Environments

Unmanned Traffic Management UTM federated ecosystems, such as InterUSS, enable secure coordination among UAS Service Suppliers USSs. However, they bring up some security challenges at the infrastructure level that haven't been fully explored. This paper presents a security testing approach for...

5.8AI score
Exploits0
RedHat Linux
RedHat Linux
added 2026/04/30 5:1 a.m.3 views

gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for...

7.5CVSS8.1AI score0.00867EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2026/04/30 4:55 a.m.3 views

gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for...

7.5CVSS8.1AI score0.00867EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2026/04/27 2:8 a.m.3 views

gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for...

7.5CVSS8.1AI score0.00867EPSS
Exploits1References5
OSV
OSV
added 2026/04/23 12:57 p.m.2 views

SUSE-SU-2026:21411-1 Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issue: - CVE-2026-5201: improper validation of color component counts when processing a specially crafted JPEG image can lead to a heap buffer overflow bsc1261210...

7.5CVSS7.4AI score0.00867EPSS
Exploits1References3
Amazon
Amazon
added 2026/04/13 12:0 a.m.2 views

Important: gdk-pixbuf2

Issue Overview: In GNOME GdkPixbuf aka gdk-pixbuf through 2.42.10, the ANI Windows animated cursor decoder encounters heap memory corruption in aniloadchunk in io-ani.c when parsing chunks in a crafted .ani file. A crafted file could allow an attacker to overwrite heap metadata, leading to a deni...

7.8CVSS8AI score0.00938EPSS
Exploits2
OSV
OSV
added 2026/03/31 9:16 a.m.1 views

DEBIAN-CVE-2026-5201

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for...

7.5CVSS8.1AI score0.00867EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/03/31 8:32 a.m.2 views

CVE-2026-5201

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for...

7.5CVSS6.1AI score0.00867EPSS
Exploits1References24
Vulnrichment
Vulnrichment
added 2026/03/31 8:32 a.m.0 views

CVE-2026-5201 Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for...

7.5CVSS6.1AI score0.00867EPSS
Exploits1References24
CNNVD
CNNVD
added 2026/03/31 12:0 a.m.4 views

gdk-pixbuf 安全漏洞

gdk-pixbuf is an open-source image loading library developed by GNOME. gdk-pixbuf has a security vulnerability that stems from the improper validation of color component counts during the processing of specially crafted JPEG images by the JPEG image loader. This can lead to a heap buffer overflow...

7.5CVSS7.2AI score0.00867EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2024-35976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: xsk: validate user input for XDPUMEM|COMPLETIONFILLRING syzbot reported an illegal copy in...

6.7CVSS6.2AI score0.00011EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/03/10 12:0 a.m.2 views

PT-2024-6136 · Аврора · Аврора

Name of the Vulnerable Software and Affected Versions: Аврора affected versions not specified Description: The issue is related to a component validation vulnerability in the Аврора operating system, which is caused by the lack of control over public write permissions for installed application...

3.8CVSS6.8AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/01/12 12:0 a.m.2 views

PT-2024-14335 · Verydows · Verydows

Name of the Vulnerable Software and Affected Versions: Verydows version 2.0 Description: The issue is related to a Cross-Site Request Forgery CSRF in the /protected/controller/backend/role controller component. This allows for unauthorized actions to be performed on behalf of a user without their...

8.8CVSS8.6AI score0.00089EPSS
Exploits1References6
Microsoft KB
Microsoft KB
added 2018/01/09 8:0 a.m.43 views

Description of the Security Only update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows 7 SP1 and Windows Server 2008 R2 SP1 and .NET Framework 4.6 for Windows Server 2008 SP2 (KB 4054183)

Description of the Security Only update for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows 7 SP1 and Windows Server 2008 R2 SP1 and .NET Framework 4.6 for Windows Server 2008 SP2 KB 4054183 View products that this article applies to. Summary This security update resolves a...

7.5CVSS8.1AI score0.34677EPSS
Exploits0
Rows per page
Query Builder