ALPINE-CVE-2020-5313

libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow...

ALPINE-CVE-2020-5312

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow...

DEBIAN-CVE-2020-5310

libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc...

DEBIAN-CVE-2020-5312

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow...

DEBIAN-CVE-2020-5311

libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow...

PYSEC-2020-83

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow...

PYSEC-2020-84

libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow...

UBUNTU-CVE-2020-5311

libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow...

Pillow FLI Buffer Overflow Vulnerability

Pillow is a Python based image processing library. A buffer overflow vulnerability exists in the libImaging/FliDecode.c file in Pillow versions prior to 6.2.2. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries,...

Design/Logic Flaw

An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in decode3dsolid in dwg.spec...

GNU LibreDWG Post-Release Reuse Vulnerability

GNU LibreDWG is a GNU Project C library for working with DWG files. A post-release reuse vulnerability exists in the 'resolveobjectrefvector' function in the decode.c file in GNU LibreDWG version 0.92. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files,...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2020-03560)

GNU LibreDWG is a GNU Project C library for working with DWG files. A buffer overflow vulnerability exists in the 'decodeR13R2000' function of the decode.c file in GNU LibreDWG version 0.92. The vulnerability stems from a networked system or product performing operations in memory without properl...

GNU LibreDWG Excessive Memory Allocation Vulnerability (CNVD-2020-03562)

GNU LibreDWG is a GNU Project C library for working with DWG files. A security vulnerability exists in the 'decode3dsolid' function of dwg.spec in versions of GNU LibreDWG prior to 0.93. An attacker can exploit this vulnerability to cause a denial of service large memory consumption...

UBUNTU-CVE-2019-15694

TigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered from DecodeManager::decodeRect. Vulnerability occurs due to the signdness error in processing MemOutStream. Exploitation of this vulnerability could potentially result into remote code execution. This...

libIEC61850 Buffer Overflow Vulnerability

libIEC61850 is an open source library for the IEC 61850 protocol. A buffer overflow vulnerability exists in the 'MmsValuedecodeMmsData' function in the mms/isomms/server/mmsaccessresult.c file in libIEC61850 version 1.4.0. The vulnerability stems from a network system or product performing...

PT-2019-6199 · Struktur Ag +4 · Libde265 +4

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.4 Description: The issue is related to a global buffer overflow in the decode CABAC bit function. This can be exploited via a crafted file, potentially allowing a remote attacker to cause a denial of service. The...

Nitro Software Free PDF Reader Buffer Error Vulnerability

Nitro Software Free PDF Reader is a set of free PDF document editor from Nitro Software, USA. The product is mainly used to create, edit, view and convert PDF documents. A JBIG2Decode stock-in-buffer error vulnerability exists in the npdf.dll file in Nitro Software Free PDF Reader version...

DEBIAN-CVE-2019-19635

An issue was discovered in libsixel 1.8.2. There is a heap-based buffer overflow in the function sixeldecoderawimpl at fromsixel.c...

UBUNTU-CVE-2019-19637

An issue was discovered in libsixel 1.8.2. There is an integer overflow in the function sixeldecoderawimpl at fromsixel.c...

PT-2019-15894 · Libsixel +1 · Libsixel +1

Name of the Vulnerable Software and Affected Versions: libsixel version 1.8.2 Description: A heap-based buffer overflow issue was found in the sixel decode raw impl function at fromsixel.c. Recommendations: For libsixel version 1.8.2, consider disabling the sixel decode raw impl function as a...