Moderate: Red Hat Security Advisory: libwebp security update

An update for libwebp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

python-pillow: Out-of-bounds read in J2K image reader

There is an out-of-bounds read in J2kDecode in j2kugrayala. For J2k images with multiple bands, it’s legal to have different widths for each band, e.g. 1 byte for L, 4 bytes for A...

RLSA-2021:4231 Moderate: libwebp security update

The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format RIFF. Webmasters, web...

Irfanview 安全漏洞

IrfanView is very fast, small, compact and innovative free graphic viewer for Windows 9x, ME, NT, 2000, XP, 2003, 2008, Vista, Windows 7, Windows 8, Windows 10. An arbitrary code execution vulnerability exists in Irfanview version 4.53. The vulnerability can be exploited to execute arbitrary code...

GHSA-P49H-HJVM-JG3H PCX P mode buffer overflow in Pillow

libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow...

EulerOS 2.0 SP8 : gd (EulerOS-SA-2021-2630)

According to the versions of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - readheadertga in gdtga.c in the GD Graphics Library aka LibGD through 2.3.2 allows remote attackers to cause a denial of service out-of-bounds read v...

HEIF Global Buffer Overflow Vulnerability (CNVD-2021-99291)

HEIF refers to High Efficiency Image File Format, a file format for single images or image sequences. hevcDecoderConfigurationRecord::getPicWidth function in hevcdecoderconfigrecord.cpp in HEIF 3.6.2 and earlier versions has global buffer overflow vulnerability. An attacker can exploit this...

Heif 缓冲区错误漏洞

HEIF refers to High Efficiency Image File Format, a file format for single images or image sequences. hevcDecoderConfigurationRecord::getPicHeight function in hevcdecoderconfigrecord.cpp in HEIF 3.6.2 and earlier versions A global buffer overflow vulnerability exists. An attacker can exploit this...

The vulnerability of the github.com/satori/go UUID module in the Singularity Image Format SIF implementation, which stems from the use of insufficiently random values, allows attackers to access confidential data.

The vulnerability of the github.com/satori/gouuid module’s implementation of Singularity Image Format SIF is related to the use of insufficiently random values for UUID identifiers. Exploiting this vulnerability could allow an attacker to gain access to confidential data...

EulerOS 2.0 SP2 : jasper (EulerOS-SA-2021-2387)

According to the versions of the jasper package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2decode function whic may lead to disclosure of information ...

libjxl Dezero Error Vulnerability

libjxl is a reference implementation of the JPEG XL image format. libjxl version 0.3.7 of lib/extras/codecapng.cc jxl::DecodeImageAPNG is vulnerable to a dezero error. An attacker can exploit this vulnerability via a malicious APNG file to cause a denial of service...

ok-file-formats 缓冲区错误漏洞

ok-file-formats is an open source decoder for PNG, JPEG, WAV and several other file formats. A buffer error vulnerability exists in ok-file-formats 1, which stems from a heap-based buffer overflow vulnerability in the okjpggeneratehuffmantable function in okjpg.c in the software...

ALPINE-CVE-2021-40145

gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes...

CVE-2021-40145

gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes...

AZL-6432 CVE-2021-40145 affecting package gd for versions less than 2.3.0-5

gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes...

CVE-2021-40145

gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes...

UBUNTU-CVE-2021-40145

gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes...

CVE-2021-40145

gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes...

CVE-2021-40145

CVE-2021-40145 is a double-free vulnerability in libgd2 (gdImageGd2Ptr in gd_gd2.c) affecting libgd2 up to and including 2.3.2. Connected advisories confirm patches/upgrades exist (e.g., Debian DLA-4411-1 fixing libgd2 in 2.3.0-2+deb11u1; Mariner and ALAS advisories indicate required upgrades to ...

CVE-2021-40145

gdImageGd2Ptr in gdgd2.c in the GD Graphics Library aka LibGD through 2.3.2 has a double free. NOTE: the vendor's position is "The GD2 image format is a proprietary image format of libgd. It has to be regarded as being obsolete, and should only be used for development and testing purposes...