CVE-2018-7637

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "16 colors" case, aka case 4...

CVE-2018-7641

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "32 bits colors" case, aka case 32...

CVE-2018-7637

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "16 colors" case, aka case 4...

CVE-2018-7639

CVE-2018-7639 affects CImg v.220 and is a heap-based buffer over-read in load_bmp in CImg.h when loading a crafted BMP image in the 16-colors case (case 16). The issue is triggered by parsing a BMP header/image data and can lead to an out-of-bounds read. NVD metrics indicate a high severity for C...

CVE-2018-7638

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability than CVE-2018-7588. This is in a "256 colors" case, aka case 8...

CVE-2018-7638

CVE-2018-7638 affects CImg v.220, with a heap-based buffer over-read in load_bmp within CImg.h when processing crafted BMP images. The issue occurs in the 256-colors path (case 8). Public details in connected sources confirm the vulnerability mechanism but do not provide a concrete vendor patch o...

Debian DLA-1297-1 : freexl security update

Leon reported five heap-based buffer-overflow vulnerabilities in FreeXL. CVE-2018-7435 There is a heap-based buffer over-read in the freexl::destroycell function. CVE-2018-7436 There is a heap-based buffer over-read in a pointer dereference of the parseSST function. CVE-2018-7437 There is a...

Heap overflow

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image...

CVE-2018-7588

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image...

CVE-2018-7588

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image...

CVE-2018-7588

CVE-2018-7588 affects the CImg image processing library (v2.20) and is due to a heap-based buffer over-read in the load_bmp function of CImg.h when loading a crafted BMP image. The issue is tied to the BMP-loading path in CImg and can lead to memory over-read during image parsing. In affected env...

CVE-2018-7588

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image...

[SECURITY] [DLA 1297-1] freexl security update

Package : freexl Version : 1.0.0b-1+deb7u5 CVE ID : CVE-2018-7435 CVE-2018-7436 CVE-2018-7437 CVE-2018-7438 CVE-2018-7439 Leon reported five heap-based buffer-overflow vulnerabilities in FreeXL. CVE-2018-7435 There is a heap-based buffer over-read in the freexl::destroycell function. CVE-2018-743...

Simple DirectMedia Layer SDL2_image load_xcf_tile_rle Decompression Code Execution Vulnerability

Summary An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.2. A specially crafted XCF image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability. Tested...

CVE-2018-7588

An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image...

Updated TiMidity++ packages fix security vulnerabilities

The insertnotesteps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted mid file. NOTE: a crash might be relevant when using the --background option CVE-2017-11546. The resamplegauss function in...

CVE-2018-7553

There is a heap-based buffer overflow in the pcxLoadRaster function of inpcx.cpp in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...

CVE-2018-7553

There is a heap-based buffer overflow in the pcxLoadRaster function of inpcx.cpp in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...

CVE-2018-7553

CVE-2018-7553 affects sam2p 0.49.4 and is described in multiple sources as a heap-based buffer overflow in pcxLoadRaster (in_pcx.cpp). Exploitation could cause denial of service or unspecified other impact. The available connected reports corroborate the vulnerability in sam2p 0.49.4, but they do...

openSUSE Security Update : GraphicsMagick (openSUSE-2018-213)

This update for GraphicsMagick fixes the following issues : Security issues fixed : - CVE-2017-11533: An infoleak by 1 byte due to heap-based buffer over-read in the WriteUILImage in coders/uil.c was fixed boo1050132 - CVE-2017-17682: A large loop vulnerability was found in the function...