Integer overflow

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted bmp file...

CVE-2016-10507

OpenJPEG contains an integer overflow in the bmp24toimage function (convertbmp.c) that affects OpenJPEG up to version 2.2.0. Exploitation of a crafted BMP file can cause a heap-based buffer over-read and a crash, i.e., a denial of service. The available connected documents indicate that fixes exi...

CVE-2016-10507

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted bmp file...

CVE-2016-10507: Integer Overflow or Wraparound

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted bmp file...

CVE-2017-13757

The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, does not validate the PLT section size, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file, related to elfi386getsyntheticsymtab...

CVE-2017-13757

The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, does not validate the PLT section size, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted ELF file, related to elfi386getsyntheticsymtab...

Ubuntu 14.04 LTS / 16.04 LTS : Ghostscript vulnerabilities (USN-3403-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3403-1 advisory. Kamil Frankowicz discovered that Ghostscript mishandles references. A remote attacker could use this to cause a denial of service...

USN-3403-1: Ghostscript vulnerabilities

Kamil Frankowicz discovered that Ghostscript mishandles references. A remote attacker could use this to cause a denial of service. CVE-2017-11714 Kim Gwan Yeong discovered that Ghostscript could allow a heap-based buffer over-read and application crash. A remote attacker could use a crafted...

PT-2017-4287

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29 Description: The issue is related to the Binary File Descriptor BFD library, specifically with the validation of the PLT section size. This allows remote attackers to cause a denial of service, resulting in a...

CVE-2017-13134

In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-13134

In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-13134: Out-of-bounds Read

In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to cause a denial of service via a crafted file...

PT-2017-3849

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.6-6 GraphicsMagick version 1.3.26 Description The issue is related to a heap-based buffer over-read error in the SFWScan function, located in coders/sfw.c, which can be exploited by attackers to cause a denial of servi...

Updated potrace packages fix security vulnerability

Potrace 1.14 has a heap-based buffer over-read in the interpolatecubic function in mkbitmap.c CVE-2017-12067...

CVE-2017-12937

CVE-2017-12937 affects GraphicsMagick 1.3.26, where the ReadSUNImage function in coders/sun.c can trigger a heap-based buffer over-read. Debi an/Ubuntu/Fedora advisories (and USN/DLA notes) confirm heap-based issues in GraphicsMagick with potential denial of service or memory disclosure. The Debi...

CVE-2017-12937: Out-of-bounds Read

The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has a colormap heap-based buffer over-read...

PT-2017-12801

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is a heap-based buffer over-read in libexiv2, triggered in the Exiv2::Image::io function in image.cpp, which can lead to a remote denial of service. Recommendations For Exiv2 version 0.26, at the moment...

PT-2019-7930

Name of the Vulnerable Software and Affected Versions mpg123 versions 1.25.5 and earlier Description A heap-based buffer over-read issue exists in the getbits function, potentially allowing remote attackers to cause a denial-of-service or have other unspecified impacts via a crafted mp3 file...

CVE-2017-12596

In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact...

CVE-2017-12596

In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact...