343 matches found
CVE-2024-28582
Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the rgbeRGBEToFloat function when reading images in HDR format...
PT-2024-22482 · Freeimage +1 · Freeimage +1
Name of the Vulnerable Software and Affected Versions: FreeImage version 3.19.0 Description: The issue allows a local attacker to cause a denial of service DoS via the FreeImage Unload function when reading images in HDR format. Recommendations: For FreeImage version 3.19.0, consider disabling th...
PT-2024-22486 · Freeimage +1 · Freeimage +1
Name of the Vulnerable Software and Affected Versions: FreeImage version 3.19.0 Description: The issue allows a local attacker to execute arbitrary code via the rgbe RGBEToFloat function when reading images in HDR format. Recommendations: For FreeImage version 3.19.0, consider disabling the rgbe...
SUSE CVE-2023-45663
stbimage is a single file MIT licensed library for processing images. The stbigetn function reads a specified number of bytes from context typically a file into the specified buffer. In case the file stream points to the end, it returns zero. There are two places where its return value is not...
Use of Uninitialized Resource
Overview Affected versions of this package are vulnerable to Use of Uninitialized Resource in the stbihdrload and stbitgaload functions. An attacker can read a specified number of bytes from context into an uninitialized buffer by manipulating the file stream to point to the end. This is only...
PT-2023-29636 · Stb Image +3 · Stb Image +3
Name of the Vulnerable Software and Affected Versions: stb image affected versions not specified Description: The issue is related to the stbi getn function in the stb image library, which reads a specified number of bytes from a context into a buffer. If the file stream points to the end, it...
The vulnerability of the MPEG12_ParseSeqHdr function (media_tools/mpeg2_ps.c) in the GPAC multimedia platform allows a perpetrator to trigger a service failure.
The vulnerability of the MPEG12ParseSeqHdr function mediatools/mpeg2ps.c in the GPAC multimedia platform is related to reading beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...
SUSE CVE-2013-2175
HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdrip or other "hdr" functions with a negative occurrence count, allows remote attackers to cause a denial of service negative array index usage and crash via an HTTP header with a certain number of values, related to the...
SUSE CVE-2016-7520
Heap-based buffer overflow in coders/hdr.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted HDR file...
PT-2022-36753 · Git +1 · Opensis
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is reported, with a crash type indicating a heap-buffer-overflow READ 1. The crash state involves functions such as par...
The vulnerability of the leaf_hdr_load_raw() function in the internal/dcraw_common.cpp component of the LibRaw image processing library allows a hacker to cause a service failure.
The vulnerability of the leafhdrloadraw function in the internal/dcrawcommon.cpp component of the LibRaw image processing library is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause service failures...
September 20, 2022—KB5017383 (OS Build 22000.1042) Preview
None None...
SAP 3D Visual Enterprise Viewer HDR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...
CVE-2022-32242
SAP 3D Visual Enterprise Viewer is affected by an HDR parsing vulnerability in Radiance Picture files (.hdr, hdr.x3d). The issue can crash the application and, per ZDI, may allow remote code execution via a write past end of an allocated buffer. Exploitation requires user interaction (the user mu...
hdr-miniaturen.de Improper Access Control vulnerability OBB-2404239
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
MGASA-2022-0074 Updated zxing-cpp packages fix security vulnerability
Buffer overflow vulnerability in function stbiextendreceive in stbimage.h in stb 2.26 via a crafted JPEG file. CVE-2021-28021 An issue was discovered in stb stbimage.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An...
SUSE SLED12 / SLES12 Security Update : zxing-cpp (SUSE-SU-2022:0163-1)
The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0163-1 advisory. - CVE-2021-28021: Fixed buffer overflow vulnerability in function stbiextendreceive in stbimage.h via a crafte...
January 25, 2022—KB5008353 (OS Build 22000.469) Preview
None None...
Security update for zxing-cpp (important)
openSUSE Security Update: Security update for zxing-cpp Announcement ID: openSUSE-SU-2022:0157-1 Rating: important References: 1191743 1191942 1191944 Cross-References: CVE-2021-28021 CVE-2021-42715 CVE-2021-42716 CVSS scores: CVE-2021-28021 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H...