CVE-2017-12596

In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact...

PT-2017-4146

Name of the Vulnerable Software and Affected Versions OpenEXR version 2.2.0 Description The issue is related to a heap-based buffer over-read in the hufDecode function during exrmaketiled execution. This may result in denial of service or possibly other unspecified impacts. Exploitation of the...

CVE-2017-11753

The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service heap-based buffer over-read via a crafted Flexible Image Transport System FITS file...

CVE-2017-12067

Potrace 1.14 has a heap-based buffer over-read in the interpolatecubic function in mkbitmap.c...

PT-2017-12332

Name of the Vulnerable Software and Affected Versions Potrace version 1.14 Description The issue is related to a heap-based buffer over-read in the interpolate cubic function, located in the mkbitmap.c file. Recommendations For Potrace version 1.14, at the moment, there is no information about a...

CVE-2017-12067: Out-of-bounds Read

Potrace 1.14 has a heap-based buffer over-read in the interpolatecubic function in mkbitmap.c...

CVE-2017-11547

The resamplegauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted mid file. NOTE: a crash might be relevant when using the --background option. NOTE: the TiMidity++ README.alsaseq documentation suggests a...

Heap overflow

The ExifImageFile::readDQT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted jpg file...

CVE-2017-11117

The ExifImageFile::readDHT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted jpg file...

CVE-2017-11547

The resamplegauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted mid file. NOTE: a crash might be relevant when using the --background option. NOTE: the TiMidity++ README.alsaseq documentation suggests a...

CVE-2017-11116

OpenExif 2.1.4 is affected by a denial of service in the ExifImageFileRead.cpp function readDQT. A crafted JPEG can trigger a heap-based buffer over-read, causing application crash. This is the documented root cause and impact across multiple sources (NVD/NVDo, CNVD, CVE listings). There is no ex...

CVE-2017-11547

The resamplegauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted mid file. NOTE: a crash might be relevant when using the --background option. NOTE: the TiMidity++ README.alsaseq documentation suggests a...

CVE-2017-11547

CVE-2017-11547 affects TiMidity++ 2.14.0, where the resample_gauss function in resample.c can cause a heap-based buffer over-read via a crafted MIDI file, leading to denial of service (potential crash). The initial description notes a possible crash with --background; exploitation details/patch s...

CVE-2017-11547

The resamplegauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted mid file. NOTE: a crash might be relevant when using the --background option. NOTE: the TiMidity++ README.alsaseq documentation suggests a...

PT-2017-13306

Name of the Vulnerable Software and Affected Versions libwpd version 0.10.1 LibreOffice versions prior to 5.3.7 Description The issue arises from the mishandling of iterators in WP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1. This mishandling allows remo...

PT-2017-11752

Name of the Vulnerable Software and Affected Versions OpenExif version 2.1.4 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted jpg file. This is due to a problem in the ExifImageFile::readDQT...

PT-2017-3844

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26 Description The issue is related to a heap-based buffer over-read in the ReadSUNImage function, located in coders/sun.c. This can potentially allow a remote attacker to execute arbitrary code. The problem is...

CVE-2017-11547: Out-of-bounds Read

The resamplegauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted mid file. NOTE: a crash might be relevant when using the --background option. NOTE: the TiMidity++ README.alsaseq documentation suggests a...

CVE-2017-11116: Out-of-bounds Read

The ExifImageFile::readDQT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted jpg file...

CVE-2017-11117: Out-of-bounds Read

The ExifImageFile::readDHT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted jpg file...