2839 matches found
openjpeg: heap-based buffer overflow in pj_t1_clbl_decode_processor in openjp2/t1.c
A heap-based buffer overflow flaw was found in the opjt1clbldecodeprocessor in openjpeg2. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
openjpeg: heap-based buffer overflow in pj_t1_clbl_decode_processor in openjp2/t1.c
A heap-based buffer overflow flaw was found in the opjt1clbldecodeprocessor in openjpeg2. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
python-pillow: out-of-bounds write in expandrow in libImaging/SgiRleDecode.c
An out-of-bounds write flaw was discovered in python-pillow in the way SGI RLE images are decoded. An application that uses python-pillow to decode untrusted images may be vulnerable to this flaw, which can allow an attacker to crash the application or potentially execute code on the system...
openjpeg: heap-based buffer overflow in pj_t1_clbl_decode_processor in openjp2/t1.c
A heap-based buffer overflow flaw was found in the opjt1clbldecodeprocessor in openjpeg2. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
DEBIAN-CVE-2015-7507
libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service out-of-bounds read via a crafted color table to the 1 bmpdecodergb or 2 bmpdecoderle function...
Libnsbmp Buffer Overflow Vulnerability
Libnsbmp is a decoding library for the BMP and ICO image file formats, written in C. It is available as part of the NetSurf project. It is part of the NetSurf project and is available for other software under the MIT license. A buffer overflow vulnerability exists in the 'bmpdecoderle' function o...
OpenJPEG Buffer Overflow Vulnerability (CNVD-2020-33736)
OpenJPEG is a C-based open source JPEG2000 codec . A buffer overflow vulnerability exists in OpenJPEG version 2.3.1 in the opjt1clbldecodeprocessor in the openjp2/t1.c file, which stems from the program's failure to properly check boundaries. A remote attacker could exploit this vulnerability wit...
CVE-2020-7226
CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data...
Denial Of Service (DoS)
cryptacular is vulnerable to denial of service. Failure to validate the nonce array length associated with new byte allows an attacker to cause excessive memory allocation on the system during a decode operation, potentially resulting in an application crash...
Ecommerce Systempay 1.0 - Production KEY Brute Force Exploit
Exploit for php platform in category web applications Exploit Title: Ecommerce Systempay 1.0 - Production KEY Brute Force Author: live3 Vendor Homepage: https://paiement.systempay.fr/doc/fr-FR/ Software Link: https://paiement.systempay.fr/doc/fr-FR/module-de-paiement-gratuit/ Tested on: MacOs...
UBUNTU-CVE-2015-8011
Buffer overflow in the lldpdecode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries...
ALPINE-CVE-2020-8112
opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851...
AZL-44577 CVE-2020-8112 affecting package openjpeg2 for versions less than 2.3.1-12
opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851...
DEBIAN-CVE-2020-8112
opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851...
UBUNTU-CVE-2020-8112
opjt1clbldecodeprocessor in openjp2/t1.c in OpenJPEG 2.3.1 through 2020-01-28 has a heap-based buffer overflow in the qmfbid==1 case, a different issue than CVE-2020-6851...
openjpeg: Heap-based buffer overflow in opj_t1_clbl_decode_processor()
A heap-based buffer overflow flaw was found in openjpeg in the opjt1clbldecodeprocessor in libopenjp2.so. Affecting versions through 2.3.1, the highest threat from this vulnerability is to file confidentiality and integrity as well as system availability...
PT-2020-2776 · Openjpeg +6 · Openjpeg +6
Name of the Vulnerable Software and Affected Versions: OpenJPEG versions 2.3.1 through 2020-01-28 Description: The issue is related to a heap-based buffer overflow in the opj t1 clbl decode processor function of the OpenJPEG library, specifically in the openjp2/t1.c file when qmfbid==1. This can ...
CVE-2020-7226
CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data...
CVE-2020-7226
CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data...
CVE-2020-7595
xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation...