CVE-2021-28855

In Deark before 1.5.8, a specially crafted input file can cause a NULL pointer dereference in the dbufwrite function src/deark-dbuf.c...

CVE-2021-28856

In Deark before v1.5.8, a specially crafted input file can cause a division by zero in src/fmtutil.c because of the value of pixelsize...

Input validation

In Deark before v1.5.8, a specially crafted input file can cause a division by zero in src/fmtutil.c because of the value of pixelsize...

CVE-2021-28855

The CVE-2021-28855 entry describes a NULL pointer dereference in Deark prior to version 1.5.8, caused by crafted input triggering the dbuf_write function (src/deark-dbuf.c). Affected software is Deark (before 1.5.8); impact is a crash (partial availability) as indicated in CVSS data. Remediation ...

CVE-2021-28855

In Deark before 1.5.8, a specially crafted input file can cause a NULL pointer dereference in the dbufwrite function src/deark-dbuf.c...

CVE-2021-28856

In Deark before v1.5.8, a specially crafted input file can cause a division by zero in src/fmtutil.c because of the value of pixelsize...

CVE-2021-28856

Deark prior to v1.5.8 is affected by a division-by-zero vulnerability in src/fmtutil.c caused by the pixelsize value when processing specially crafted input files. Affected software is Deark (open source command-line tool for decoding certain file types); the issue is triggered in fmtutil.c, lead...

Jason Summers deark 数字错误漏洞

Jason Summers deark is a Jason Summers open source application. A command line utility that can decode certain types of files. A numeric error vulnerability exists in versions prior to Jason Summers Deark v1.5.8, which can be exploited by an attacker to cause a divide-by-zero error via a speciall...

PT-2021-17965

Name of the Vulnerable Software and Affected Versions: Deark versions prior to 1.5.8 Description: The issue arises from a specially crafted input file that can cause a NULL pointer dereference in the dbuf write function, located in src/deark-dbuf.c. Recommendations: For versions prior to 1.5.8,...

PT-2021-17966

Name of the Vulnerable Software and Affected Versions: Deark versions prior to 1.5.8 Description: A specially crafted input file can cause a division by zero in the src/fmtutil.c file due to the value of pixelsize. Recommendations: For versions prior to 1.5.8, update to version 1.5.8 or later to...