89 matches found
gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow
A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the blockrem variable, occurs when a user opens a specially crafted .psd image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource...
CVE-2026-82343
A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not properly validate the channel-count parameter. This incorrect validation leads to improper memory bounds checking, resulting in both a heap out-of-bounds read and a stack...
CVE-2026-82343
A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not properly validate the channel-count parameter. This incorrect validation leads to improper memory bounds checking, resulting in both a heap out-of-bounds read and a stack...
Astra Linux – Vulnerability in openimageio
There is a heap out-of-bounds read vulnerability in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD image file. A specially crafted .psd file can cause a read of arbitrary memory addresses, leading to a denial of service attack. An attacker can provide a...
CVE-2026-4150
A flaw was found in GIMP. A remote attacker can exploit this vulnerability by enticing a user to open a specially crafted PSD Photoshop Document file. This flaw is due to an integer overflow during the parsing of PSD files, which can lead to arbitrary code execution, allowing the attacker to run...
CVE-2026-2239
A flaw was found in GIMP. Heap-buffer-overflow vulnerability exists in the freadpascalstring function when processing a specially crafted PSD Photoshop Document file. This occurs because the buffer allocated for a Pascal string is not properly null-terminated, leading to an out-of-bounds read whe...
EUVD-2026-7460
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap information disclosure vulnerability exists in ImageMagick's PSD Adobe Photoshop format handler. When processing a maliciously crafted PSD file containin...
CVE-2020-23888
A User Mode Write AV in Editor!TMethodImplementationIntercept+0x53f6c3 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted psd file...
CVE-2025-65803
An integer overflow in the psdParser::ReadImageData function of FreeImage v3.18.0 and before allows attackers to cause a Denial of Service DoS via supplying a crafted PSD file...
CVE-2025-65803
CVE-2025-65803 affects the FreeImage project (v3.18.0 and earlier). The root cause is an integer overflow in psdParser::ReadImageData, enabling a Denial of Service via a crafted PSD file. Connected sources (Red Hat, NVD, Debian, Ubuntu, OSV, Debian, CN) confirm the same description and identify F...
EUVD-2014-9638
Malware in sbrugna...
EUVD-2016-8375
Malware in sbrugna...
EUVD-2016-8374
Malware in sbrugna...
EUVD-2019-4392
Malware in sbrugna...
EUVD-2014-9633
Malware in sbrugna...
EUVD-2014-9630
Malware in sbrugna...
EUVD-2020-16625
Malware in sbrugna...
EUVD-2017-8838
Malware in sbrugna...