Lucene search
K

26 matches found

SUSE CVE
SUSE CVE
added 2026/04/16 11:27 p.m.4 views

SUSE CVE-2026-40917

A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the icnsslurp function, occurs when processing specially crafted ICNS image files. An attacker could provide a malicious ICNS file, potentially leading to application crashes or information disclosure on systems that process...

7.1CVSS5.9AI score0.00012EPSS
Exploits0References3
EUVD
EUVD
added 2026/04/15 9:30 p.m.3 views

EUVD-2026-23024

A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the icnsslurp function, occurs when processing specially crafted ICNS image files. An attacker could provide a malicious ICNS file, potentially leading to application crashes or information disclosure on systems that process...

5CVSS5.9AI score0.00012EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/15 6:59 p.m.2 views

CVE-2026-40917

A flaw was found in GIMP. This vulnerability, a heap buffer over-read in the icnsslurp function, occurs when processing specially crafted ICNS image files. An attacker could provide a malicious ICNS file, potentially leading to application crashes or information disclosure on systems that process...

5CVSS5.9AI score0.00012EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/04/15 12:0 a.m.4 views

GIMP 安全漏洞

GIMP is an open-source bitmap image editor developed by the GIMP team. GIMP has a security vulnerability, which stems from excessive heap buffer reading in the icnsslurp function. This vulnerability may cause the application to crash or lead to information leaks when processing specially crafted...

7.1CVSS5.9AI score0.00012EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/26 8:0 p.m.4 views

CVE-2026-2272

A flaw was found in GIMP. An integer overflow vulnerability exists when processing ICO image files, specifically in the icoreadinfo and icoreadicon functions. This issue arises because a size calculation for image buffers can wrap around due to a 32-bit integer evaluation, allowing oversized imag...

4.3CVSS7.3AI score0.00033EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2026/03/02 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-26271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a buffer overread in freerdpimagecopyfromicondata...

6.9CVSS5.8AI score0.00077EPSS
Exploits0References4
OSV
OSV
added 2026/02/25 8:40 p.m.2 views

CVE-2026-26271 Buffer Overread in FreeRDP Icon Processing

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, a buffer overread in freerdpimagecopyfromicondata libfreerdp/codec/color.c can be triggered by crafted RDP Window Icon TSICONINFO data. The bug is reachable over the network when a client processes icon data...

6.9CVSS6.1AI score0.00077EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:45 a.m.2 views

SUSE CVE-2017-8765

The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can cause memory exhaustion via a crafted ICON file...

6.5CVSS8.7AI score0.00389EPSS
Exploits0References7
BDU FSTEC
BDU FSTEC
added 2022/08/29 12:0 a.m.1 views

The vulnerability of the PDF-XChange PDF document viewing and editing program, related to the occurrence of operations outside the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the PDF document viewing and editing software PDF-XChange lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created malicious ICO file...

10CVSS8AI score0.00621EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2021/11/10 10:15 p.m.1 views

CVE-2020-23887

XnView MP v0.96.4 was discovered to contain a heap overflow which allows attackers to cause a denial of service DoS via a crafted ico file. Related to a Read Access Violation starting at USER32!SmartStretchDIBits+0x33...

5.5CVSS6.1AI score
Exploits0References2
CNNVD
CNNVD
added 2021/11/10 12:0 a.m.2 views

WildBit Viewer 缓冲区错误漏洞

WildBit Viewer is a compact image viewer with slide show and editor. A buffer overflow vulnerability exists in WildBit Viewer version 6.6, which can be exploited by an attacker to cause a denial of service via a specially crafted ico file...

5.5CVSS6AI score0.00165EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2020/06/17 12:0 a.m.1 views

The vulnerability of the IG_load_file function in the ImageGear image processing library allows a hacker to execute arbitrary code.

The vulnerability of the IGloadfile function in the ImageGear image processing library is related to the output of the operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created ICO file...

9.8CVSS8.4AI score0.01431EPSS
Exploits1References6Affected Software1
CNVD
CNVD
added 2020/05/07 12:0 a.m.1 views

Accusoft ImageGear Buffer Overflow Vulnerability (CNVD-2020-27758)

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A buffer error vulnerability exists in the igcore19d.dll ICO icoread parser in Accusoft ImageGear version 19.5.0. An attacker can exploit this vulnerability to execute code with the help of specially...

9.8CVSS7.6AI score0.01431EPSS
Exploits1References1
CNVD
CNVD
added 2018/08/08 12:0 a.m.1 views

XnView Denial of Service Vulnerability (CNVD-2019-10273)

XnView is a multi-platform software that supports image viewing, conversion and editing. A denial of service vulnerability exists in XnView 2.45, which can be exploited by remote attackers to cause a denial of service via a specially crafted ICO file...

7.8CVSS7.4AI score0.00234EPSS
Exploits1References1
Snyk
Snyk
added 2018/04/24 7:29 p.m.1 views

Integer Overflow or Wraparound

Amendment This was deemed not a vulnerability. Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound. An exploitable code execution vulnerability exists in the ICO image rendering functionality of SDL2image-2.0.2. A specially crafted ICO image can cause an...

8.8CVSS7.9AI score0.0132EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2017/08/01 3:34 p.m.2 views

gstreamer: Out of bounds heap read in windows_icon_typefind

The windowsicontypefind function in gst-plugins-base in GStreamer before 1.10.2, when GSLICE is set to always-malloc, allows remote attackers to cause a denial of service out-of-bounds read via a crafted ico file...

4.7CVSS7.4AI score0.00312EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2017/06/15 12:0 a.m.3 views

The vulnerability of the Windows Shell component of the Windows operating system, which allows a hacker to execute arbitrary code

The vulnerability of the Windows Shell component of the Windows operating system is related to errors in the processing of LNK files. Exploiting this vulnerability allows a local attacker to execute arbitrary code by connecting a storage device to the system, which contains a specially crafted ic...

7.2CVSS7.4AI score0.93878EPSS
Exploits20References3
RedhatCVE
RedhatCVE
added 2017/05/09 2:20 p.m.25 views

CVE-2017-8765

The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can cause memory exhaustion via a crafted ICON file...

7.1CVSS4.4AI score0.00389EPSS
Exploits0References1
CNVD
CNVD
added 2017/05/05 12:0 a.m.1 views

ImageMagick Memory Leak Vulnerability

ImageMagick is the United States ImageMagick Studio, Inc. of a set of open source image processing software, the software can read, convert, write a variety of formats. A memory leak vulnerability in the function named ReadICONImage in the encoder icon.c in ImageMagick version 7.0.5-5 allows remo...

7.1CVSS7AI score0.00389EPSS
Exploits0References1
OSV
OSV
added 2017/05/04 4:59 a.m.1 views

DEBIAN-CVE-2017-8765

The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can cause memory exhaustion via a crafted ICON file...

6.5CVSS6.7AI score0.00389EPSS
Exploits0References1
Rows per page
Query Builder