CVE-2021-28307

An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a non-raster image for a window icon...

CVE-2021-28308

CVE-2021-28308 affects the Rust fltk crate (pre-0.15.3). The issue is an out-of-bounds read in the pixmap constructor due to missing input validation, enabling potential memory safety disruption. Affected version is

CVE-2021-28308

An issue was discovered in the fltk crate before 0.15.3 for Rust. There is an out-of bounds read because the pixmap constructor lacks pixmap input validation...

CVE-2021-28308

An issue was discovered in the fltk crate before 0.15.3 for Rust. There is an out-of bounds read because the pixmap constructor lacks pixmap input validation...

Mohammed Alyousef fltk-rs code issue vulnerabilities

Mohammed Alyousef fltk-rs is Mohammed Alyousef an open source application . Provides a cross-platform lightweight GUI library that can be statically linked to generate small, self-contained and fast GUI applications. A security vulnerability exists in fltk-rs, which stems from a null pointer...

CVE-2021-28306: NULL Pointer Dereference

An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a multi label type if the image is nonexistent...

CVE-2021-28307: NULL Pointer Dereference

An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a non-raster image for a window icon...

fltk crate for Rust – Buffer error vulnerability

fltk crate for Rust is a cross-platform lightweight GUI library. It can be statically linked to produce small, standalone and fast GUI applications. A security vulnerability exists in fltk crate before 0.15.3 for Rust, which stems from a read overrun in the pixmap constructor due to a lack of...

CVE-2021-28308: Out-of-bounds Read

An issue was discovered in the fltk crate before 0.15.3 for Rust. There is an out-of bounds read because the pixmap constructor lacks pixmap input validation...

booklibrs (>=0.1.0, <=1.0.4), fl2rust (0.3.1) +5 more potentially affected by CVE-2021-28306 +2 more via fltk (>=0.9.7, <=0.14.13)

fltk CARGO version =0.9.7, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0, =0.9.15 Source cves: CVE-2021-28306, CVE-2021-28307, CVE-2021-28308 Source advisory: OSV:RUSTSEC-2021-0038...

RUSTSEC-2021-0038 Multiple memory safety issues

Affected versions contain multiple memory safety issues, such as: - Setting a multi label type where an image doesn't exist would lead to a NULL pointer dereference. - Setting a window icon using a non-raster image which FLTK rasterizes lazily would lead to a NULL dereference. - Pixmap constructo...

PT-2021-17844

Name of the Vulnerable Software and Affected Versions: fltk crate versions prior to 0.15.3 Description: The issue is related to multiple memory safety problems in the fltk crate for Rust. These problems include a NULL pointer dereference when attempting to use a multi-label type with a nonexisten...

PT-2021-17845

Name of the Vulnerable Software and Affected Versions: fltk crate versions prior to 0.15.3 Description: The issue is related to multiple memory safety problems. There is a NULL pointer dereference when attempting to use a non-raster image for a window icon. Additionally, setting a multi-label typ...

PT-2021-17846

Name of the Vulnerable Software and Affected Versions: fltk crate versions prior to 0.15.3 Description: The issue is related to multiple memory safety problems. There is an out-of-bounds read due to the lack of input validation in the pixmap constructor. Additionally, NULL pointer dereferences ca...

AZL-45315 CVE-2020-14152 affecting package fltk for versions less than 1.3.8-1

In IJG JPEG aka libjpeg before 9d, jpegmemavailable in jmemnobs.c in djpeg does not honor the maxmemorytouse setting, possibly causing excessive memory consumption...

AZL-44973 CVE-2017-12652 affecting package fltk for versions less than 1.3.8-1

libpng before 1.6.32 does not properly check the length of chunks against the user limit...

AZL-45210 CVE-2019-7317 affecting package fltk for versions less than 1.3.8-1

pngimagefree in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because pngimagefreefunction is called under pngsafeexecute...

AZL-44265 CVE-2015-2158 affecting package fltk for versions less than 1.3.8-1

Off-by-one error in the pngcrushmeasureidat function in pngcrush.c in pngcrush before 1.7.84 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PNG file...

AZL-43846 CVE-2015-2158 affecting package fltk 1.3.5-4

Off-by-one error in the pngcrushmeasureidat function in pngcrush.c in pngcrush before 1.7.84 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted PNG file...

CentOS 7 : fltk / tigervnc (CESA-2017:2000)

An update for tigervnc and fltk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...