PT-2018-16264 · Acd Systems · Canvas Draw

Name of the Vulnerable Software and Affected Versions: Canvas Draw version 4.0.0 Description: An out-of-bounds write exists in the PCX parsing functionality. A specially crafted PCX image can lead to an out-of-bounds write, overwriting arbitrary data, and potentially allowing an attacker to gain...

PT-2018-16263 · Acd Systems · Canvas Draw

Name of the Vulnerable Software and Affected Versions: Canvas Draw version 4.0.0 Description: An out-of-bounds write exists in the PCX parsing functionality. A specially crafted PCX image can lead to an out-of-bounds write, overwriting arbitrary data, and potentially allowing an attacker to gain...

PT-2018-16254 · Acd Systems · Canvas Draw

Name of the Vulnerable Software and Affected Versions: Canvas Draw version 4.0.0 Description: An out-of-bounds write exists in the TIFF parsing functionality. A specially crafted TIFF image can lead to an out-of-bounds write, overwriting arbitrary data, and potentially allowing an attacker to...

ACD Systems Canvas Draw 4 PlanarConfiguration Heap Overflow Code Execution Vulnerability

Summary An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerabili...

ACD Systems Canvas Draw 4 setRasterData Heap Overflow Code Execution Vulnerability

Summary An exploitable heap overflow exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this vulnerabili...

ACD Systems Canvas Draw 4 Huff Table Out-of-bounds Write Code Execution Vulnerability

Summary An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this...

ACD Systems Canvas Draw 4 Resolution_Set Out of Bounds Write Code Execution Vulnerability

Summary An exploitable out-of-bounds write exists in the TIFF parsing functionality of Canvas Draw version 4.0.0. A specially crafted TIFF image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a TIFF image to trigger this...

PT-2018-16252 · Acd Systems · Canvas Draw

Name of the Vulnerable Software and Affected Versions: Canvas Draw version 4.0.0 Description: A heap overflow exists in the TIFF parsing functionality. A specially crafted TIFF image can lead to an out-of-bounds write, overwriting arbitrary data, and potentially allowing an attacker to execute co...

PT-2018-16253 · Acd Systems · Canvas Draw

Name of the Vulnerable Software and Affected Versions: Canvas Draw version 4.0.0 Description: An out-of-bounds write exists in the TIFF parsing functionality. A specially crafted TIFF image can lead to an out-of-bounds write, overwriting arbitrary data, and potentially allowing an attacker to gai...

ACD Systems Canvas Draw 4 Invert Map Out-of-Bounds Write Code Execution Vulnerability

Summary An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this...

ACD Systems Canvas Draw 4 IO Metadata Out-of-Bounds Write Code Execution Vulnerability

Summary An exploitable out-of-bounds write exists in the PCX parsing functionality of Canvas Draw version 4.0.0. A specially crafted PCX image processed via the application can lead to an out-of-bounds write, overwriting arbitrary data. An attacker can deliver a PCX image to trigger this...

skia/api_draw_functions: Use-of-uninitialized-value in is_finite

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5734506001596416 Project: skia Fuzzer: libFuzzerskiaapidrawfunctions Fuzz target binary: apidrawfunctions Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

Mozilla Firefox Heap Memory Misreference Vulnerability

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. A memory misreference vulnerability exists in mozilla::WebGLContext::DrawElementsInstanced in Mozilla Firefox during WebGL operations. An attacker could exploit this vulnerability to cause a...

CVE-2016-9043

An out of bound write vulnerability exists in the EMF parsing functionality of CorelDRAW X8 CdrGfx - Corel Graphics Engine 64-Bit - 18.1.0.661. A specially crafted EMF file can cause a vulnerability resulting in potential code execution. An attacker can send the victim a specific EMF file to...

Qemu: Out-of-bounds read in vga_draw_text routine

An out-of-bounds read access issue was found in the VGA emulator of QEMU. It could occur in vgadrawtext routine, while updating display area for a vnc client. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS...

Qemu: Out-of-bounds read in vga_draw_text routine

An out-of-bounds read access issue was found in the VGA emulator of QEMU. It could occur in vgadrawtext routine, while updating display area for a vnc client. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS...

skia/api_draw_functions: Use-of-uninitialized-value in set_sat

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=6302702343553024 Project: skia Fuzzer: libFuzzerskiaapidrawfunctions Fuzz target binary: apidrawfunctions Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

DEBIAN-CVE-2018-5683

The vgadrawtext function in Qemu allows local OS guest privileged users to cause a denial of service out-of-bounds read and QEMU process crash by leveraging improper memory address validation...

UBUNTU-CVE-2018-5683

The vgadrawtext function in Qemu allows local OS guest privileged users to cause a denial of service out-of-bounds read and QEMU process crash by leveraging improper memory address validation...

QEMU Denial of Service Vulnerability (CNVD-2018-03275)

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A security vulnerability exists in the 'vgadrawtext' function in QEMU. A local attacker can exploit this vulnerability to cause a denial of...