114 matches found
SUSE CVE-2026-46599
The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image both in terms of pixel width/height and encoded size to make the decoder decode large amounts of compressed data...
EUVD-2026-33432
golang.org/x/image/tiff has excessive resource consumption in PackBits decompression...
UBUNTU-CVE-2026-12912
A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT8BITABGR output format and a specific stride value, leading to a heap-base...
Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image
Summary A specially crafted image can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execution. Details Incus validates an image as soon as it sees a normal metadata.yaml and a rootfs/ entry, but full extraction can later process a duplicate...
DEBIAN-CVE-2026-46599
The TIFF decoder does not place a limit on the size of PackBits-compressed data. A maliciously-crafted image can exploit this to cause a small image both in terms of pixel width/height and encoded size to make the decoder decode large amounts of compressed data...
CVE-2026-41911 OpenClaw < 2026.4.8 - Workspace-Only Filesystem Policy Bypass via docx upload_file/upload_image
OpenClaw before 2026.4.8 contains a filesystem policy bypass vulnerability in docx upload processing that allows local file reads outside workspace boundaries. Attackers can exploit uploadfile and uploadimage endpoints to access files beyond the intended workspace-only filesystem policy...
CVE-2026-4887 Gimp: gimp:memory disclosure and denial of service via specially crafted pcx image
A flaw was found in GIMP. This issue is a heap buffer over-read in GIMP PCX file loader due to an off-by-one error. A remote attacker could exploit this by convincing a user to open a specially crafted PCX image. Successful exploitation could lead to out-of-bounds memory disclosure and a possible...
Exploit for Use of Uninitialized Resource in Microsoft
CVE-2025-50165 Windows Graphics Component RCE x64 Critica...
EUVD-2007-5478
Malware in sbrugna...
EUVD-2014-9601
Malware in sbrugna...
EUVD-2005-3708
Malware in sbrugna...
EUVD-2006-3195
Malware in sbrugna...
EUVD-2010-2601
Malware in sbrugna...
EUVD-2013-0870
Malware in sbrugna...
EUVD-2012-0296
Malware in sbrugna...
EUVD-2016-4657
Malware in sbrugna...
EUVD-2016-10405
Malware in sbrugna...
EUVD-2017-8663
Malware in sbrugna...