63 matches found
UBUNTU-CVE-2026-26740
Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the EGifGCBToExtension function in giftool. An attacker can cause a system crash or denial of service by supplying a specially crafted Graphics Control Extension block that triggers a buffer overflow. Remediation...
CVE-2026-26740
Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size...
CVE-2026-26740
Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size...
CVE-2026-26740
A buffer overflow vulnerability exists in giflib v.5.2.2 within the EGifGCBToExtension function. The flaw occurs because the library fails to validate the allocated size when overwriting an existing Graphic Control Extension block. A remote attacker can exploit this to cause a denial of service (...
Giflib 安全漏洞
Giflib is an open-source library and utility for processing GIFs in OpenEuler. Version 5.2.2 of giflib contains a security vulnerability. This vulnerability arises from EGifGCBToExtension failing to validate the allocated size when overriding existing graphic control extension blocks, which may...
CVE-2026-26740
Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size...
giflib -- Buffer Overflow vulnerability
https://github.com/zakkanijia/POC/blob/main/giflib/giftool/giflibgiftoolgcelenheapoobwritedisclosure.md reports: Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block...
CVE-2026-26740
Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size...
CVE-2026-26740
Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size...
MiracleLinux 4 : xorg-x11-server-1.13.0-23.1.0.1.AXS4 (AXSA:2014-075:01)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2014-075:01 advisory. X.Org X11 X server Security issues fixed with this release: CVE-2013-1940 X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict acce...
PT-2026-26131
Name of the Vulnerable Software and Affected Versions giflib version 5.2.2 Description A buffer overflow issue exists in giflib version 5.2.2. This flaw is due to the EGifGCBToExtension function overwriting an existing Graphic Control Extension block without validating its allocated size. This ca...
Linux Distros Unpatched Vulnerability : CVE-2016-10376
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gajim through 0.16.7 unconditionally implements the XEP-0146: Remote Controlling Clients extension. This can be abused by malicious XMPP servers to, for example...
The vulnerability of Git’s version control extension for large Git files arises from improper elimination of special elements in the output data used by the incoming component. This allows a malicious actor to gain unauthorized access to user credentials.
The vulnerability of Git’s version control extension for large Git files is related to incorrect elimination of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to user...
xorg-x11-server: SELinux unlabeled GLX PBuffer
A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the client issues another request to access that resource as with a GetGeometry or when it creates another resource that needs to access that buffer, such as...
CVE-2024-0310
A content-security-policy vulnerability in ENS Control browser extension prior to 10.7.0 Update 15 allows a remote attacker to alter the response header parameter setting to switch the content security policy into report-only mode, allowing an attacker to bypass the content-security-policy...
PT-2024-15460 · Unknown · Ens Control
Name of the Vulnerable Software and Affected Versions: ENS Control browser extension versions prior to 10.7.0 Update 15 Description: A content-security-policy vulnerability allows a remote attacker to alter the response header parameter setting to switch the content security policy into report-on...
CVE-2022-36453: Improper Authorization
A vulnerability in the MiCollab Client API of Mitel MiCollab 9.1.3 through 9.5.0.101 could allow an authenticated attacker to modify their profile parameters due to improper authorization controls. A successful exploit could allow the authenticated attacker to control another extension number...
PT-2022-23377
Name of the Vulnerable Software and Affected Versions Mitel MiCollab versions 9.1.3 through 9.5.0.101 Description A vulnerability in the MiCollab Client API could allow an authenticated attacker to modify their profile parameters due to improper authorization controls. A successful exploit could...
Malicious code in multivalue-control-extension (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c20ccad20c88f78dd6c0719c821828b0702dea6a8416413d0e40ba51a7ba8e65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...