3708 matches found
Jasper 安全漏洞
Jasper is a flexible and powerful GitHub issue reader from the Jasper open source. A security vulnerability exists in Jasper version 4.2.2, which stems from the presence of an Assertion Failure vulnerability that allows an attacker to cause a denial of service attack via a specific image file...
Buffer Overflow
pillow is vulnerable to Buffer Overflow. The vulnerability is due improper use of strcpy when copying a buffer in imagingcms.c, which allows an attacker to submit a crafted image resulting in a buffer overflow...
Fedora 38 : ghc-base64 / ghc-hakyll / gitit / pandoc / patat (2024-6ad6b9f417)
The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-6ad6b9f417 advisory. Security fix for CVE-2023-35936 and CVE-2023-38745 - pandoc: backport fixes for CVE-2023-35936 and CVE-2023-38745 - base64 now packaged in Fedora...
CVE-2024-25580
An issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur via a crafted KTX image file...
CVE-2024-25580
The CVE-2024-25580 issue affects Qt, specifically in gui/util/qktxhandler.cpp, with potential buffer overflow leading to application crash when reading crafted KTX images. Affected products/versions include Qt before 5.15.17, Qt 6.x before 6.2.12, Qt 6.3.x–6.5.x before 6.5.5, and Qt 6.6.x before ...
The vulnerability of the ImageIO component in operating systems such as iOS, iPadOS, tvOS, watchOS, macOS, and visionOS allows attackers to execute arbitrary code.
The vulnerability of the ImageIO component in iOS, iPadOS, tvOS, watchOS, macOS, and visionOS lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created image file...
Cisco Unified IP Phones 7900 Series Unsigned Code Installation (CVE-2011-1637)
Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.2.1 do not properly verify signatures for software images, which allows local users to gain privileges via a crafted image, aka Bug ID CSCtn65962. This plugin only works with Tenable.ot. Please visit...
ROS-2-2162
2.2162 Multiple vulnerabilities in libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...
Fedora 38 : hugin (2024-60cefb07e8)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-60cefb07e8 advisory. Security fix for CVE-2024-25442 CVE-2024-25443 CVE-2024-25445 CVE-2024-25446 Tenable has extracted the preceding description block directly from the...
openSUSE 15 Security Update : hugin (openSUSE-SU-2024:0047-1)
The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0047-1 advisory. - An issue in the HuginBase::PanoramaMemento::loadPTScript function of Hugin v2022.0.0 allows attackers to cause a heap buffer overflow via parsi...
Security advisory: Potential Buffer Overflow when reading KTX images
A recently reported potential buffer overflow issue in Qt’s KTX’s image handling has been assigned the CVE id CVE-2024-25580. An issue was discovered in Qt from 5.12.0 through 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. With a specifically crafted KTX ima...
Buffer Overflow
hugin is vulnerable to Buffer Overflow. The vulnerability is due to the PanoramaMemento::loadPTScript function. This allows an attacker to cause a heap buffer overflow via parsing a crafted image...
SUSE CVE-2024-25443
An issue in the HuginBase::ImageVariable::linkWith function of Hugin v2022.0.0 allows attackers to cause a heap-use-after-free via parsing a crafted image...
SUSE CVE-2024-25442
An issue in the HuginBase::PanoramaMemento::loadPTScript function of Hugin v2022.0.0 allows attackers to cause a heap buffer overflow via parsing a crafted image...
SUSE CVE-2024-25447
An issue in the imlibloadimagewitherrorreturn function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a crafted image...
SUSE CVE-2024-25446
An issue in the HuginBase::PTools::setDestImage function of Hugin v2022.0.0 allows attackers to cause a heap buffer overflow via parsing a crafted image...
SUSE CVE-2024-25448
An issue in the imlibfreeimageanddecache function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a crafted image...
CVE-2024-25448
An issue in the imlibfreeimageanddecache function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a crafted image...
