CVE-2019-20822

An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.7.0.29430. It has an out-of-bounds write via incorrect image data...

Out-of-bounds

An issue was discovered in the 3D Plugin Beta for Foxit Reader and PhantomPDF before 9.7.0.29430. It has an out-of-bounds write via incorrect image data...

CVE-2019-20822

The CVE-2019-20822 issue affects Foxit Reader and PhantomPDF’s 3D Plugin Beta, with an out-of-bounds write caused by incorrect image data in versions prior to 9.7.0.29430. The vulnerability is described across multiple sources as a buffer write/overflow in the 3D Plugin, impacting the plugin comp...

CVE-2020-12751

An issue was discovered on Samsung mobile devices with O8.X, P9.0, and Q10.0 software. The Quram image codec library allows attackers to overwrite memory and execute arbitrary code via crafted JPEG data that is mishandled during decoding. The Samsung ID is SVE-2020-16943 May 2020...

Same Origin Policy Bypass

WebKitGTK+ is vulnerable to same origin policy bypass. It was found that WebKit did not correctly restrict read access to images created from the "canvas" element. Malicious web content could allow a remote attacker to bypass the same-origin policy and potentially access sensitive image data...

CVE-2019-6977

gdImageColorMatch in gdcolormatch.c in the GD Graphics Library aka LibGD 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigg...

[SECURITY] Fedora 30 Update: dcraw-9.28.0-9.fc30

This package contains dcraw, a command line tool to decode raw image data downloaded from digital cameras...

[SECURITY] Fedora 31 Update: dcraw-9.28.0-9.fc31

This package contains dcraw, a command line tool to decode raw image data downloaded from digital cameras...

Fedora: Security Advisory for dcraw (FEDORA-2020-545493aa4b)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

stor.green Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1112069 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting stor.green website and it...

baanna.go.th Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1075687 Security Researcher geeknik Helped patch 8729 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting baanna.go.th website and i...

Huawei EulerOS: Security Advisory for php (EulerOS-SA-2019-1251)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Information Disclosure

endroid/qr-code is vulnerable to information disclosure. The logo is not validated to contain valid image data, allowing an attacker to specify a non-image data and retrieve data from non-image files...

Foxit 3D Plugin Beta 9.7.0.29430 NULL Pointer Dereference Vulnerability

The version of the Foxit 3D plugin installed on the remote Windows host is prior to 9.7.0.29430. It is, therefore affected by a NULL pointer dereference flaw due to improper validation of image data when parsing certain files with incorrect image information. An unauthenticated, remote attacker c...

Debian DLA-2049-1 : imagemagick security update

Multiple vulnerabilities have been found in imagemagick, an image processing toolkit. CVE-2019-19948 Heap-buffer-overflow in WriteSGIImage coders/sgi.c caused by insufficient validation of row and column sizes. This vulnerability might be leveraged by remote attackers to cause denial of service o...

Mozilla Firefox Source Validation Error Vulnerability

Mozilla Firefox Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. A source validation error vulnerability exists in Mozilla Firefox versions prior to 71. The vulnerability stems from an error when handling unsuccessfully loaded images loaded data that is not an image...

php: Heap buffer over-read in exif_scan_thumbnail()

When PHP EXIF extension is parsing EXIF information from an image, e.g. via exifreaddata function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21 and 7.3.x below 7.3.8 it is possible to supply it with data what will cause it to read past the allocated buffer. This may lead to information...

gd: Heap-based buffer overflow in gdImageColorMatch() in gd_color_match.c

gdImageColorMatch in gdcolormatch.c in the GD Graphics Library aka LibGD 2.2.5, as used in the imagecolormatch function in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1, has a heap-based buffer overflow. This can be exploited by an attacker who is able to trigg...

DEBIAN-CVE-2019-9817

Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird 60.7, Firefox 67, and Firefox ESR 60.7...

CVE-2019-9817

Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird 60.7, Firefox 67, and Firefox ESR 60.7...