CVE-2024-41132 SixLabors ImageSharp Allows Excessive Memory Allocation in Gif Decoder

ImageSharp is a 2D graphics API. A vulnerability discovered in the ImageSharp library, where the processing of specially crafted files can lead to excessive memory usage in the Gif decoder. The vulnerability is triggered when ImageSharp attempts to process image files that are designed to exploit...

CVE-2024-41132 SixLabors ImageSharp Allows Excessive Memory Allocation in Gif Decoder

ImageSharp is a 2D graphics API. A vulnerability discovered in the ImageSharp library, where the processing of specially crafted files can lead to excessive memory usage in the Gif decoder. The vulnerability is triggered when ImageSharp attempts to process image files that are designed to exploit...

CVE-2024-41132

CVE-2024-41132 (ImageSharp) : A vulnerability in the ImageSharp Gif decoder can cause excessive memory usage when processing specially crafted GIF files. The issue is triggered during image processing and affects SixLabors.ImageSharp. Remediation is to upgrade to SixLabors.ImageSharp versions 3.1...

CVE-2024-41132 SixLabors ImageSharp Allows Excessive Memory Allocation in Gif Decoder

ImageSharp is a 2D graphics API. A vulnerability discovered in the ImageSharp library, where the processing of specially crafted files can lead to excessive memory usage in the Gif decoder. The vulnerability is triggered when ImageSharp attempts to process image files that are designed to exploit...

CVE-2024-41131 Out-of-bounds Write in SixLabors ImageSharp

ImageSharp is a 2D graphics API. An Out-of-bounds Write vulnerability has been found in the ImageSharp gif decoder, allowing attackers to cause a crash using a specially crafted gif. This can potentially lead to denial of service. All users are advised to upgrade to v3.1.5 or v2.1.9...

CVE-2024-41131 Out-of-bounds Write in SixLabors ImageSharp

ImageSharp is a 2D graphics API. An Out-of-bounds Write vulnerability has been found in the ImageSharp gif decoder, allowing attackers to cause a crash using a specially crafted gif. This can potentially lead to denial of service. All users are advised to upgrade to v3.1.5 or v2.1.9...

CVE-2024-41131

ImageSharp is a 2D graphics API. An Out-of-bounds Write vulnerability has been found in the ImageSharp gif decoder, allowing attackers to cause a crash using a specially crafted gif. This can potentially lead to denial of service. All users are advised to upgrade to v3.1.5 or v2.1.9...

CVE-2024-41131

CVE-2024-41131 describes an Out-of-bounds Write vulnerability in the ImageSharp gif decoder of SixLabors.ImageSharp, allowing an attacker to crash the application via a specially crafted GIF file, with potential denial of service. Affected component: ImageSharp GIF decoding path within the 2D gra...

CVE-2024-41131 Out-of-bounds Write in SixLabors ImageSharp

ImageSharp is a 2D graphics API. An Out-of-bounds Write vulnerability has been found in the ImageSharp gif decoder, allowing attackers to cause a crash using a specially crafted gif. This can potentially lead to denial of service. All users are advised to upgrade to v3.1.5 or v2.1.9...

CVE-2024-41131: Out-of-bounds Write

ImageSharp is a 2D graphics API. An Out-of-bounds Write vulnerability has been found in the ImageSharp gif decoder, allowing attackers to cause a crash using a specially crafted gif. This can potentially lead to denial of service. All users are advised to upgrade to v3.1.5 or v2.1.9...

PT-2024-29285

Name of the Vulnerable Software and Affected Versions ImageSharp versions prior to 2.1.9 ImageSharp versions prior to 3.1.5 Description An Out-of-bounds Write issue has been found in the ImageSharp gif decoder, allowing attackers to cause a crash using a specially crafted gif. This can potentiall...

CVE-2024-41132: Memory Allocation with Excessive Size Value

ImageSharp is a 2D graphics API. A vulnerability discovered in the ImageSharp library, where the processing of specially crafted files can lead to excessive memory usage in the Gif decoder. The vulnerability is triggered when ImageSharp attempts to process image files that are designed to exploit...

simd:simd_load_fuzzer: Crash in Simd::Base::jpeg__jpeg_decode_block

Detailed Report: https://oss-fuzz.com/testcase?key=5181907155877888 Project: simd Fuzzing Engine: libFuzzer Fuzz Target: simdloadfuzzer Job Type: libfuzzerasansimd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7a10f8922eb1 Crash State: Simd::Base::jpegjpegdecodeblock...

vodozemac's usage of non-constant time base64 decoder could lead to leakage of secret key material

Versions before 0.7.0 of vodozemac use a non-constant time base64 implementation for importing key material for Megolm group sessions and PkDecryption Ed25519 secret keys. This flaw might allow an attacker to infer some information about the secret key material through a side-channel attack. Impa...

RUSTSEC-2024-0354 Usage of non-constant time base64 decoder could lead to leakage of secret key material

Versions before 0.7.0 of vodozemac use a non-constant time base64 implementation for importing key material for Megolm group sessions and PkDecryption Ed25519 secret keys. This flaw might allow an attacker to infer some information about the secret key material through a side-channel attack. Impa...

CLSA-2024-1721206996 poppler: Fix of CVE-2022-38784

CVE-2022-38784: fix integer overflow in JBIG2 decoder...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_FIXED_fuzzer: Heap-use-after-free in aac_decode_frame_int

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6007809271988224 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDAACFIXEDfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address:...

ffmpeg:ffmpeg_AV_CODEC_ID_HEVC_fuzzer: Segv on unknown address in boundary_strength

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5908731129298944 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDHEVCfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...

ffmpeg:ffmpeg_AV_CODEC_ID_AAC_LATM_fuzzer: Global-buffer-overflow in decode_usac_core_coder

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6723855293415424 Project: ffmpeg Fuzzing Engine: honggfuzz Fuzz Target: ffmpegAVCODECIDAACLATMfuzzer Job Type: honggfuzzasanffmpeg Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Crash...

RHEL 7 : golang (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - go: encoding/xml: XML element instability CVE-2020-29511 - The x/text package before 0.3.3 for Go has a...