imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in fillIntraPredModeCandidates

Detailed Report: https://oss-fuzz.com/testcase?key=5420165030281216 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: fillIntraPredModeCandidates...

imagemagick:encoder_psd_fuzzer: Use-of-uninitialized-value in CompositeOverImage

Detailed Report: https://oss-fuzz.com/testcase?key=6012197348114432 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: CompositeOverImage CompositeIma...

imagemagick:encoder_viff_fuzzer: Use-of-uninitialized-value in IdentifyImageGray

Detailed Report: https://oss-fuzz.com/testcase?key=6264545198800896 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodervifffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: IdentifyImageGray WriteVIFFIma...

SUSE-SU-2024:0241-1 Security update for jasper

This update for jasper fixes the following issues: - CVE-2023-51257: Fixed an out of bounds write in the JPC encoder bsc1218802...

SUSE-SU-2024:0240-1 Security update for jasper

This update for jasper fixes the following issues: - CVE-2023-51257: Fixed an out of bounds write in the JPC encoder bsc1218802...

imagemagick:encoder_gif_fuzzer: Stack-buffer-overflow in FormatLocaleStringList

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4903040851181568 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encodergiffuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Stack-buffer-overflow WRITE...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void intra_prediction_angular<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=6372919387160576 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void intrapredictionangular vo...

PT-2024-41602

Уязвимость функции dpu encoder helper phys cleanup модуля drivers/gpu/drm/msm/disp/dpu1/dpu encoder.c - драйвера поддержки инфраструктуры прямого рендеринга DRI ядра операционной системы Linux связана с неправильным контролем идентификаторов ресурсов «внедрение ресурсов». Эксплуатация уязвимости...

CVE-2024-0643

Unrestricted upload of dangerous file types in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to upload different file extensions without any restrictions, resulting in a full system compromise...

CVE-2024-0642

Inadequate access control in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to access the application as an administrator user through the application endpoint, due to lack of proper credential management...

CVE-2024-0643

Unrestricted upload of dangerous file types in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to upload different file extensions without any restrictions, resulting in a full system compromise...

CVE-2024-0642

Inadequate access control in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to access the application as an administrator user through the application endpoint, due to lack of proper credential management...

Design/Logic Flaw

Unrestricted upload of dangerous file types in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to upload different file extensions without any restrictions, resulting in a full system compromise...

Design/Logic Flaw

Inadequate access control in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to access the application as an administrator user through the application endpoint, due to lack of proper credential management...

CVE-2024-0643 Unrestricted upload of dangerous file types in C21 Live Encoder and Live Mosaic

Unrestricted upload of dangerous file types in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to upload different file extensions without any restrictions, resulting in a full system compromise...

CVE-2024-0643 Unrestricted upload of dangerous file types in C21 Live Encoder and Live Mosaic

Unrestricted upload of dangerous file types in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to upload different file extensions without any restrictions, resulting in a full system compromise...

CVE-2024-0643

CVE-2024-0643 affects C21 Live Encoder and Live Mosaic, version 5.3. The issue is an unrestricted upload of dangerous file types in the product, enabling a remote attacker to upload various file extensions without restrictions and potentially achieve full system compromise. Some sources corrobora...

CVE-2024-0642 Inadequate access control in C21 Live Encoder and Live Mosaic

Inadequate access control in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to access the application as an administrator user through the application endpoint, due to lack of proper credential management...

CVE-2024-0642

CVE-2024-0642 affects C21 Live Encoder and Live Mosaic (v5.3). Root cause: inadequate access control due to improper credential management, enabling a remote unauthenticated attacker to access the application as an administrator via the application endpoint. CVSS v3.1 base score 9.8 (CRITICAL) wi...

C21 Live encoder Access Control Error Vulnerability

Cires21 C21 Live encoder is a software for various encoding and transcoding needs from Cires21. An Access Control Error vulnerability exists in C21 Live Encoder and Live Mosaic version 5.3 that stems from a lack of proper credentials management, which allows an attacker to ask the application as ...