Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gstreamer1 (UTSA-2025-984705)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984705 advisory. GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte...

RLSA-2025:7178 Moderate: gstreamer1, gstreamer1-plugins-bad-free, gstreamer1-plugins-ugly-free, and gstreamer1-rtsp-server security update

The gstreamer1 packages contain a streaming media framework, based on graphs of filters which operate on media data. Security Fixes: gstreamer: EXIF Metadata Parsing Integer Overflow CVE-2024-4453 gstreamer: AV1 Video Parsing Stack-based Buffer Overflow CVE-2024-0444 For more details about the...

RockyLinux 9 : gstreamer1, gstreamer1-plugins-bad-free, gstreamer1-plugins-ugly-free, and gstreamer1-rtsp-server (RLSA-2025:7178)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:7178 advisory. gstreamer: EXIF Metadata Parsing Integer Overflow CVE-2024-4453 gstreamer: AV1 Video Parsing Stack-based Buffer Overflow CVE-2024-0444 Tenable has...

EUVD-2023-12679

Malicious code in bioql PyPI...

EUVD-2025-3157

Malicious code in bioql PyPI...

EUVD-2019-19009

Malicious code in bioql PyPI...

EUVD-2023-53424

Malicious code in bioql PyPI...

EUVD-2023-53423

Malicious code in bioql PyPI...

EUVD-2023-33387

Malicious code in bioql PyPI...

EUVD-2025-10404

Malicious code in bioql PyPI...

EUVD-2022-7148

Malicious code in bioql PyPI...

EUVD-2024-44072

Malicious code in bioql PyPI...

EUVD-2022-45004

Malicious code in bioql PyPI...

Integer overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute arbitrary code via a crafted EXIF file that triggers a heap-based buffer overflow.

...

[SECURITY] Fedora 43 Update: exiv2-0.28.6-2.fc43

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted values, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...

Linux Distros Unpatched Vulnerability : CVE-2020-1917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xbufformatconverter, used as part of exifreaddata, was appending a terminating null character to the generated string, but was not using its standard append cha...

[SECURITY] Fedora 41 Update: exiv2-0.28.6-2.fc41

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted values, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...

Linux Distros Unpatched Vulnerability : CVE-2022-41837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write vulnerability exists in the OpenImageIO::addexifitemtospec functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially-crafted...

Exiv2 缓冲区错误漏洞

Exiv2 is a set of C++ libraries and command line applications for managing image metadata from the individual developer Andreas Huggel. The product provides the ability to read and write image metadata in a variety of formats including EXIF, IPTC and XMP. A buffer error vulnerability exists in...

Linux Distros Unpatched Vulnerability : CVE-2024-28577

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Null Pointer Dereference vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to cause a denial of service DoS via the...