Mozilla: Integer overflow when calculating buffer sizes for images

A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw value is used instead of the checked value. This leads to a possible out-of-bounds write. This vulnerability affects Thunderbird 60.4, Firefox ESR 60.4, and Firefox 64...

Mozilla: Integer overflow when calculating buffer sizes for images

A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw value is used instead of the checked value. This leads to a possible out-of-bounds write. This vulnerability affects Thunderbird 60.4, Firefox ESR 60.4, and Firefox 64...

PT-2018-2707

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 64 Firefox ESR versions prior to 60.4 Thunderbird versions prior to 60.4 Description The issue is related to an integer overflow that can lead to an out-of-bounds write in memory. This can be exploited by a remote...

UBUNTU-CVE-2018-19762

There is a heap-based buffer overflow at fromsixel.c function: imagebufferresize in libsixel 1.8.2 that will cause a denial of service or possibly unspecified other impact...

CVE-2018-19762

There is a heap-based buffer overflow at fromsixel.c function: imagebufferresize in libsixel 1.8.2 that will cause a denial of service or possibly unspecified other impact...

PT-2018-15077 · Libsixel +1 · Libsixel +1

Name of the Vulnerable Software and Affected Versions: libsixel version 1.8.2 Description: A heap-based buffer overflow occurs in the image buffer resize function within the fromsixel.c file of libsixel, potentially causing a denial of service or other unspecified impacts. Recommendations: For...

PYSEC-2018-135

Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted image file, a different vulnerability than CVE-2018-10999...

Libsixel Memory Disclosure Vulnerability

libsixel is a SIXEL encoder/decoder implementation. The 'sixeldecoderdecode' function in the decoder.c file, the 'imagebufferresize' function in the fromsixel.c file, and the 'sixeldecoderaw' function in the fromsixel.c file in libsixel version 1.8.1. ' function, 'imagebufferresize' function of t...

DEBIAN-CVE-2018-14072

libsixel 1.8.1 has a memory leak in sixeldecoderdecode in decoder.c, imagebufferresize in fromsixel.c, and sixeldecoderaw in fromsixel.c...

UBUNTU-CVE-2018-14072

libsixel 1.8.1 has a memory leak in sixeldecoderdecode in decoder.c, imagebufferresize in fromsixel.c, and sixeldecoderaw in fromsixel.c...

DEBIAN-CVE-2018-12293

The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer overflow triggered by an integer overflow, which...

Blender BKE_image_acquire_ibuf integer overflow vulnerability

Blender is an open source cross-platform all-in-one 3D animation software, providing a series of animated short film production solutions from modeling, animation, materials, rendering, to audio processing, video editing and so on. An integer overflow vulnerability exists in Blender...

CVE-2017-17501

WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file...

gd: Integer Overflow in gdImagePaletteToTrueColor() resulting in heap overflow

An integer overflow flaw, leading to a heap-based buffer overflow was found in the gdImagePaletteToTrueColor function of PHP's gd extension. A remote attacker could use this flaw to crash a PHP application or execute arbitrary code with the privileges of the user running that PHP application usin...

CVE-2016-5767

An integer overflow flaw, leading to a heap-based buffer overflow was found in the gdImagePaletteToTrueColor function of PHP's gd extension. A remote attacker could use this flaw to crash a PHP application or execute arbitrary code with the privileges of the user running that PHP application usin...

The vulnerability of Google Chrome browser allows a perpetrator to obtain confidential information.

The vulnerability of the nacceleratedImageBufferSurfaceSurface class in the WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp file of the Blink component in Google Chrome browser is caused by incorrect initialization behavior. Exploiting this vulnerability could allow a remote...

CVE-2016-1614

The UnacceleratedImageBufferSurface class in WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp in Blink, as used in Google Chrome before 48.0.2564.82, mishandles the initialization mode, which allows remote attackers to obtain sensitive information from process memory via a...

openmotif21 stack overflows in libxpm

Multiple stack-based buffer overflows in 1 xpmParseColors in parse.c, 2 ParseAndPutPixels in create.c, and 3 ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file...

Fedora 8 : SDL_image-1.2.6-5.fc8 (2008-1208)

Tue Jan 29 2008 Brian Pepple - 1.2.6-5 - Add patch to fix ILBM image buffer overflow. 430693 - Thu Jan 24 2008 Brian Pepple - 1.2.6-4 - Add patch to fix buffer-overflow. 430100 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...