CVE-2022-35434

jpeg-quantsmooth before commit 8879454 contained a floating point exception FPE via /jpeg-quantsmooth/jpegqs+0x4f5d6c...

CVE-2022-35434

jpeg-quantsmooth before commit 8879454 contained a floating point exception FPE via /jpeg-quantsmooth/jpegqs+0x4f5d6c...

CVE-2022-35013

Vulnerability summary: PNGDec contains a floating-point exception (FPE) in the SaveBMP function located at /linux/main.cpp (commit 8abf6be). This is the root cause reported across multiple sources (e.g., NVD, Red Hat, OSV, CNNVD). Affected component: PNGDec image decoding library; function SaveBM...

CVE-2022-35013

PNGDec commit 8abf6be was discovered to contain a FPE via SaveBMP at /linux/main.cpp...

CVE-2022-35013

PNGDec commit 8abf6be was discovered to contain a FPE via SaveBMP at /linux/main.cpp...

CVE-2022-36148

fdkaac commit 53fe239 was discovered to contain a floating point exception FPE via wavopen at /src/wavreader.c...

CVE-2022-35004

JPEGDEC commit be4843c was discovered to contain a FPE via TIFFSHORT at /src/jpeg.inl...

CVE-2022-35004

CVE-2022-35004 concerns the JPEGDEC library. Multiple connected sources confirm a fault in the TIFFSHORT handling within /src/jpeg.inl, caused by a floating-point exception (FPE) that constitutes the underlying vulnerability. The NVD entry specifies a CVSS v3.1 base score of 5.5 (Medium) with Loc...

CVE-2022-34999

JPEGDEC commit be4843c was discovered to contain a FPE via DecodeJPEG at /src/jpeg.inl...

CVE-2022-34999

CVE-2022-34999 concerns JPEGDEC (JPEG decoder, Arduino focus) with a vulnerability in the DecodeJPEG path (/src/jpeg.inl) due to a floating point exception (FPE) introduced by commit be4843c. The issue is described as a local fault that can impact availability (CVSSv3.1: AV:L/AC:L/PR:N/UI:R/S:U/C...

CVE-2022-34999

JPEGDEC commit be4843c was discovered to contain a FPE via DecodeJPEG at /src/jpeg.inl...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-2111)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FPE in `tf.raw_ops.UnravelIndex`

Impact An attacker can cause denial of service in applications serving models using tf.rawops.UnravelIndex by triggering a division by 0: python import tensorflow as tf tf.rawops.UnravelIndexindices=-1, dims=1,0,2 The implementation does not check that the tensor subsumed by dims is not empty...

CVE-2021-34335

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A floating point exception FPE due to an integer divide by zero was found in Exiv2 versions v0.27.4 and earlier. The FPE is triggered when Exiv2 is used to print the metadata...

CVE-2021-34335

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A floating point exception FPE due to an integer divide by zero was found in Exiv2 versions v0.27.4 and earlier. The FPE is triggered when Exiv2 is used to print the metadata...

CVE-2021-34335

Exiv2 v0.27.4 and earlier have a denial-of-service risk caused by a floating-point exception (divide-by-zero) when printing translated metadata (requires -p t). The issue triggers on crafted image files and can be exploited to crash Exiv2, not a general compromise. The vulnerability is fixed in v...

CVE-2021-34335 Denial of service due to FPE in Exiv2::Internal::resolveLens0xffff

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A floating point exception FPE due to an integer divide by zero was found in Exiv2 versions v0.27.4 and earlier. The FPE is triggered when Exiv2 is used to print the metadata...

Division by 0 in `Reverse`

Impact An attacker can cause a denial of service via a FPE runtime error in tf.rawops.Reverse: python import tensorflow as tf tensorinput = tf.constant, shape=0, 1, 1, dtype=tf.int32 dims = tf.constantFalse, True, False, shape=3, dtype=tf.bool tf.rawops.Reversetensor=tensorinput, dims=dims This i...

Division by 0 in `FusedBatchNorm`

Impact An attacker can cause a denial of service via a FPE runtime error in tf.rawops.FusedBatchNorm: python import tensorflow as tf x = tf.constant, shape=1, 1, 1, 0, dtype=tf.float32 scale = tf.constant, shape=0, dtype=tf.float32 offset = tf.constant, shape=0, dtype=tf.float32 mean = tf.constan...

Google TensorFlow Denial of Service Vulnerability (CNVD-2021-37631)

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow. The vulnerability stems from an FPE runtime error in tf.rawops.SparseMatMul. An attacker can exploit the vulnerability to cause a denial of service...