CVE-2018-13794

A heap-based buffer overflow exists in stbibmploadcont in stbimage.h in catimg 2.4.0...

CVE-2018-13794

CVE-2018-13794 affects catimg 2.4.0 due to a heap-based buffer overflow in the function stbi__bmp_load_cont in stb_image.h. The issue is described across multiple connected entries as a heap overflow in the BMP loader, with no explicit exploitation details provided in the documents. The CVSS info...

openSUSE Security Update : unzip (openSUSE-2018-709)

This update for unzip fixes the following issues : - CVE-2014-9636: Prevent denial of service out-of-bounds read or write and crash via an extra field with an uncompressed size smaller than the compressed field size in a zip archive that advertises STORED method compression bsc914442 -...

Debian: Security Advisory (DLA-1411-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1411-1 : tiff security update

Several issues were discovered in TIFF, the Tag Image File Format library, that allowed remote attackers to cause a denial of service or other unspecified impact via a crafted image file. CVE-2017-11613: DoS vulnerability A crafted input will lead to a denial of service attack. During the TIFFOpe...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:1851-1)

This update for ImageMagick fixes the following issues: These security issues were fixed : - CVE-2017-13758: Prevent heap-based buffer overflow in the TracePoint function bsc1056277. - CVE-2017-10928: Prevent heap-based buffer over-read in the GetNextToken function that allowed remote attackers t...

CVE-2018-13037

An issue was discovered in jpeg-compressor 0.1. The bmpload function in stbimage.c allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact...

CVE-2018-13037

An issue was discovered in jpeg-compressor 0.1. The bmpload function in stbimage.c allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact...

CVE-2018-13037

CVE-2018-13037 affects jpeg-compressor 0.1, where the bmp_load function in stb_image.c is vulnerable to a heap-based buffer overflow that can cause a denial of service and potentially other impacts. The issue is described as exploitable by remote attackers (per CVE records), with network attack v...

openSUSE: Security Advisory for tiff (openSUSE-SU-2018:1834-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for tiff (moderate)

This update for tiff fixes the following issues: These security issues were fixed: - CVE-2017-18013: There was a Null-Pointer Dereference in the tifprint.c TIFFPrintDirectory function, as demonstrated by a tiffinfo crash. bsc1074317 - CVE-2018-10963: The TIFFWriteDirectorySec function in...

Heap overflow

PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact by triggering a large pAlphaBlend-cbBitsSrc value...

CVE-2018-12932

PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact by triggering a large pAlphaBlend-cbBitsSrc value...

CVE-2018-12932

PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact by triggering a large pAlphaBlend-cbBitsSrc value...

CVE-2018-12932

The CVE-2018-12932 issue affects Wine (notably Wine 3.7) in the PlayEnhMetaFileRecord function (enhmetafile.c). The vulnerability arises from handling a large pAlphaBlend->cbBitsSrc value, leading to a heap-based buffer overflow. The documented impact is a denial of service and potentially uns...

CVE-2018-12932

PlayEnhMetaFileRecord in enhmetafile.c in Wine 3.7 allows attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact by triggering a large pAlphaBlend-cbBitsSrc value...

Denial Of Service (DoS)

libtiff.so is susceptible to denial of service DoS attack. The attack is possible when an attacker send a malicious TIFF file to the cpSeparateBufToContigBuf function in tiffcp.c to cause a heap-based buffer overflow...

CVE-2018-12900

CVE-2018-12900 affects LibTIFF and is a heap-based buffer overflow in the function cpSeparateBufToContigBuf (tiffcp.c). Public disclosures describe that processing crafted TIFF files can cause a denial of service (crash) and may potentially lead to arbitrary code execution, depending on the envir...

CVE-2018-12889

An issue was discovered in CCN-lite 2.0.1. There is a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnlpopulatecache for an array lacking '\0' termination when reading a binary CCNx or NDN file. This can result in Heap Corruption. This was addressed by fixing the memory managemen...

Heap overflow

An issue was discovered in CCN-lite 2.0.1. There is a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnlpopulatecache for an array lacking '\0' termination when reading a binary CCNx or NDN file. This can result in Heap Corruption. This was addressed by fixing the memory managemen...