3178 matches found
CVE-2019-14369
Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...
PYSEC-2019-245
Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...
CVE-2019-14373
An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a heap-based buffer over-read in libpng via a crafted flif file...
CVE-2019-14373
CVE-2019-14373 affects Free Lossless Image Format (FLIF) 0.3, where the crash is triggered in image_save_png (image/image-png.cpp) leading to a heap-based buffer over-read via a crafted FLIF file. The vulnerability arises from improper data boundary handling during processing, as described in mul...
CVE-2019-14368
Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata in rafimage.cpp...
CVE-2019-14368
Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata in rafimage.cpp...
CVE-2019-14368
Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() (rafimage.cpp). The CVE-2019-14368 entry is corroborated across NVD, Red Hat/SUSE advisories, and CNVD; exploitation details, affected products/versions beyond 0.27.99.0 are not provided in the connected document...
PT-2019-20117
Name of the Vulnerable Software and Affected Versions Exiv2 version 0.27.99.0 Description The issue allows attackers to cause a denial of service, specifically a heap-based buffer over-read, by utilizing a crafted image file. This is related to the Exiv2::PngImage::readMetadata function in the...
CVE-2019-14368: Out-of-bounds Read
Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata in rafimage.cpp...
PT-2019-13650
Name of the Vulnerable Software and Affected Versions Free Lossless Image Format FLIF version 0.3 Description An issue was discovered in the image save png function in image/image-png.cpp, allowing attackers to trigger a heap-based buffer over-read in libpng via a crafted flif file. Recommendatio...
CVE-2019-14369: Out-of-bounds Read
Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...
CVE-2019-14369
Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...
CVE-2019-14373: Out-of-bounds Read
An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a heap-based buffer over-read in libpng via a crafted flif file...
CVE-2019-14369
Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...
PT-2019-13647
Name of the Vulnerable Software and Affected Versions Exiv2 version 0.27.99.0 Description The issue is a heap-based buffer over-read in the Exiv2::RafImage::readMetadata function, located in the rafimage.cpp file. Recommendations For Exiv2 version 0.27.99.0, at the moment, there is no information...
PT-2019-20116
Name of the Vulnerable Software and Affected Versions Exiv2 version 0.27.99.0 Description The issue is a heap-based buffer over-read in the Exiv2::RafImage::readMetadata function, located in the rafimage.cpp file. Recommendations For Exiv2 version 0.27.99.0, consider avoiding the use of the...
CVE-2019-14369
CVE-2019-14369 : Exiv2 0.27.99.0’s PngImage::readMetadata() (pngimage.cpp) allows a crafted PNG image to trigger a heap-based buffer over-read, leading to a denial of service. Public documents corroborate this impact and indicate fixes in Exiv2 release 0.27.4 (and related patches in downstream di...
CVE-2019-14369
Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...
Denial Of Service (DoS)
libsass.so is vulnerable to denial of service DoS. The attack is possible because an attacker can send a malicious input to jsonmkstream in sasscontext.cpp, causing a heap-based buffer over-read...
SUSE SLES12 Security Update : glibc (SUSE-SU-2019:1958-1)
This update for glibc fixes the following issues : Security issues fixed : CVE-2019-9169: Fixed a heap-based buffer over-read via an attempted case-insensitive regular-expression match bsc1127308. CVE-2009-5155: Fixed a denial of service in parseregexp bsc1127223. Non-security issues fixed: Added...