CVE-2019-14369

Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...

PYSEC-2019-245

Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...

CVE-2019-14373

CVE-2019-14373 affects Free Lossless Image Format (FLIF) 0.3, where the crash is triggered in image_save_png (image/image-png.cpp) leading to a heap-based buffer over-read via a crafted FLIF file. The vulnerability arises from improper data boundary handling during processing, as described in mul...

CVE-2019-14373

An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a heap-based buffer over-read in libpng via a crafted flif file...

CVE-2019-14368

Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata in rafimage.cpp...

CVE-2019-14368

Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata in rafimage.cpp...

CVE-2019-14368

Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() (rafimage.cpp). The CVE-2019-14368 entry is corroborated across NVD, Red Hat/SUSE advisories, and CNVD; exploitation details, affected products/versions beyond 0.27.99.0 are not provided in the connected document...

PT-2019-20117

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.27.99.0 Description The issue allows attackers to cause a denial of service, specifically a heap-based buffer over-read, by utilizing a crafted image file. This is related to the Exiv2::PngImage::readMetadata function in the...

PT-2019-13650

Name of the Vulnerable Software and Affected Versions Free Lossless Image Format FLIF version 0.3 Description An issue was discovered in the image save png function in image/image-png.cpp, allowing attackers to trigger a heap-based buffer over-read in libpng via a crafted flif file. Recommendatio...

CVE-2019-14369: Out-of-bounds Read

Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...

CVE-2019-14369

Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...

CVE-2019-14373: Out-of-bounds Read

An issue was discovered in imagesavepng in image/image-png.cpp in Free Lossless Image Format FLIF 0.3. Attackers can trigger a heap-based buffer over-read in libpng via a crafted flif file...

PT-2019-13647

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.27.99.0 Description The issue is a heap-based buffer over-read in the Exiv2::RafImage::readMetadata function, located in the rafimage.cpp file. Recommendations For Exiv2 version 0.27.99.0, at the moment, there is no information...

CVE-2019-14369

Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...

CVE-2019-14368: Out-of-bounds Read

Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata in rafimage.cpp...

CVE-2019-14369

Exiv2::PngImage::readMetadata in pngimage.cpp in Exiv2 0.27.99.0 allows attackers to cause a denial of service heap-based buffer over-read via a crafted image file...

PT-2019-20116

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.27.99.0 Description The issue is a heap-based buffer over-read in the Exiv2::RafImage::readMetadata function, located in the rafimage.cpp file. Recommendations For Exiv2 version 0.27.99.0, consider avoiding the use of the...

CVE-2019-14369

CVE-2019-14369 : Exiv2 0.27.99.0’s PngImage::readMetadata() (pngimage.cpp) allows a crafted PNG image to trigger a heap-based buffer over-read, leading to a denial of service. Public documents corroborate this impact and indicate fixes in Exiv2 release 0.27.4 (and related patches in downstream di...

Denial Of Service (DoS)

libsass.so is vulnerable to denial of service DoS. The attack is possible because an attacker can send a malicious input to jsonmkstream in sasscontext.cpp, causing a heap-based buffer over-read...

openSUSE: Security Advisory for ImageMagick (openSUSE-SU-2019:1795-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...