CVE-2024-25442

An issue in the HuginBase::PanoramaMemento::loadPTScript function of Hugin v2022.0.0 allows attackers to cause a heap buffer overflow via parsing a crafted image...

CVE-2024-25442

An issue in the HuginBase::PanoramaMemento::loadPTScript function of Hugin v2022.0.0 allows attackers to cause a heap buffer overflow via parsing a crafted image...

CVE-2024-25442

CVE-2024-25442 affects Hugin v2022.0.0. The issue is in HuginBase::PanoramaMemento::loadPTScript and allows a heap buffer overflow when parsing a crafted image. Public notices reference fixes in openSUSE (openSUSE-SU-2024:0047-1) and Fedora (FEDORA-2024-60cefb07e8), and OSV/OpenSUSE postings indi...

Hugin Buffer Error Vulnerability

Hugin is a cross-platform open source panoramic photography image stitching software by Hugin Open Source. A buffer error vulnerability exists in Hugin version v2022.0.0, which stems from a vulnerability that allows an attacker to cause a heap buffer overflow by parsing a carefully crafted image...

CVE-2024-25447

CVE-2024-25447 affects imlib2 v1.9.1, where the function imlib_load_image_with_error_return can be exploited to cause a heap-based buffer overflow by parsing a crafted image. The issue is consistently described across multiple sources as a vulnerability in imlib2 with potential high impact (confi...

CVE-2024-25448

An issue in the imlibfreeimageanddecache function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a crafted image...

CVE-2024-25446

An issue in the HuginBase::PTools::setDestImage function of Hugin v2022.0.0 allows attackers to cause a heap buffer overflow via parsing a crafted image...

CVE-2024-25448

An issue in the imlibfreeimageanddecache function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a crafted image...

CVE-2024-25446

An issue in the HuginBase::PTools::setDestImage function of Hugin v2022.0.0 allows attackers to cause a heap buffer overflow via parsing a crafted image...

CVE-2024-25446

An issue in the HuginBase::PTools::setDestImage function of Hugin v2022.0.0 allows attackers to cause a heap buffer overflow via parsing a crafted image...

CVE-2024-25446

An issue in the HuginBase::PTools::setDestImage function of Hugin v2022.0.0 allows attackers to cause a heap buffer overflow via parsing a crafted image...

CVE-2024-25448

An issue in the imlibfreeimageanddecache function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow via parsing a crafted image...

CVE-2024-25448

CVE-2024-25448 affects imlib2 1.9.1; the vulnerability is in imlib_free_image_and_decache and allows a heap buffer overflow via parsing a crafted image. The provided documents describe the affected component and the impact (memory corruption) but do not include remediation details or patched vers...

CVE-2024-25442

An issue in the HuginBase::PanoramaMemento::loadPTScript function of Hugin v2022.0.0 allows attackers to cause a heap buffer overflow via parsing a crafted image...

Chromium: CVE-2024-1283 Heap buffer overflow in Skia

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Fedora 39 : chromium (2024-5745525066)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-5745525066 advisory. Update to 121.0.6167.160 High CVE-2024-1284: Use after free in Mojo High CVE-2024-1283: Heap buffer overflow in Skia Tenable has extracted the...

CentOS 8 : firefox (CESA-2023:5184)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2023:5184 advisory. - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate of CVE-2023-4863. CVE-2023-5129 - Heap buffer overflow i...

CentOS 8 : firefox (CESA-2023:5433)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2023:5433 advisory. - During the worker lifecycle, a use-after-free condition could have occured, which could have led to a potentially exploitable crash. This vulnerabili...

Debian dsa-5617 : chromium - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5617 advisory. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5617-1...

EulerOS 2.0 SP5 : libwebp (EulerOS-SA-2024-1149)

According to the versions of the libwebp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds...