3940 matches found
DEBIAN-CVE-2022-2521
It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...
DEBIAN-CVE-2022-2520
A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...
CVE-2020-35538
A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...
AZL-10824 CVE-2020-35538 affecting package libjpeg-turbo for versions less than 2.1.4-1
A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...
ALPINE-CVE-2020-35538
A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...
Null pointer dereference
A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...
CVE-2020-35538
A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...
CVE-2020-35536
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
Double free
It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...
CVE-2022-2520
A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...
CVE-2020-35538
A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo...
CVE-2020-35538
CVE-2020-35538: A crafted input file could cause a NULL pointer dereference in jcopy_sample_rows() within libjpeg-turbo. The IBM Cloud Pak for Business Automation bulletin lists this CVE as affecting Cloud Pak foundational services, indicating a library-level issue that can trigger a crash/denial...
Heap overflow
An issue was discovered in the GNU C Library glibc 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads uninitialized memory from the heap and prints it to the target log file, potentially revealing a portion of the contents of the heap...
CVE-2022-2520
Summary: CVE-2022-2520 affects LibTIFF 4.4.0rc1, where a sysmalloc assertion in rotateImage() (tiffcrop.c:8621) can cause a crash when processing crafted input. The connected advisories confirm additional related flaws in the same library (e.g., CVE-2022-2519, CVE-2022-2521, CVE-2022-2868, CVE-20...
libjpeg-turbo 代码问题漏洞
libjpeg-turbo is a software application. Provides a JPEG image codec that uses SIMD instructions to accelerate baseline JPEG compression and decompression on x86, x86-64, Arm, PowerPC, and MIPS systems, and progressive JPEG compression on x86, x86-64, and Arm systems. A security vulnerability...
CVE-2022-2520
A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...
CVE-2022-2521
It was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose at tifclose.c:131 called by tiffcrop.c:2522 that can cause a program crash and denial of service while processing crafted input...
CVE-2022-2520
A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage at tiffcrop.c:8621 that can cause program crash when reading a crafted input...
PT-2022-8939 · Gnu · Gcc
Name of the Vulnerable Software and Affected Versions: gcc affected versions not specified Description: The issue is related to an internal compiler error in the match reload function at lra-constraints.c, which may cause a crash when a crafted input file is used. Recommendations: At the moment,...