Use after free in image

Affected versions of this crate would call Vec::setlen on an uninitialized vector with user-provided type parameter, in an interface of the HDR image format decoder. They would then also call other code that could panic before initializing all instances. This could run Drop implementations on...

ILM OpenEXR 安全漏洞

ILM OpenEXR is an image file format from Industrial Light and Magic ILM, USA, for high dynamic range HDR images. A security vulnerability exists in ILM OpenEXR. An attacker could exploit this vulnerability to cause a denial of service DoS or code execution...

[SECURITY] [DLA 2732-1] openexr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2732-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler August 04, 2021 https://wiki.debian.org/LTS -...

GNOME gThumb 安全漏洞

gThumb is a versatile image viewing tool that can manage, edit, and view images. gThumb versions prior to 3.10.1 are vulnerable to a denial of service. An attacker could exploit this vulnerability to crash the program via malformed JPEG images...

CVE-2021-34311

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The Monoloader.dll library in affected applications lacks proper validation of user-supplied data when parsing J2K files. This could result in an out of bounds write past the end of an...

CVE-2021-34310

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The Tiffloader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out of bounds write past the end of an...

CVE-2021-34299

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The Tiffloader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out of bounds read past the end of an...

OpenEXR: Multiple vulnerabilities

Background OpenEXR is a high dynamic-range HDR image file format developed by Industrial Light & Magic for use in computer imaging applications. Description Multiple vulnerabilities have been discovered in OpenEXR. Please review the CVE identifiers referenced below for details. Impact Please revi...

CVE-2021-27039

A maliciously crafted TIFF and PCX file can be forced to read and write beyond allocated boundaries when parsing the TIFF and PCX file for based overflow. This vulnerability can be exploited to execute arbitrary code...

The vulnerability of the ReadTIFFImage function in the coders/tiff.c component of the console image editing tool ImageMagick, related to a lack of resource allocation mechanism, allows attackers to cause service failures.

The vulnerability of the ReadTIFFImage function in the coders/tiff.c component of the console-based image editing tool ImageMagick is related to an improper check of the image data size in the file. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the console-based graphic editor ImageMagick, related to excessive iteration, allows a hacker to trigger a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to excessive iteration. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created mng image...

DEBIAN-CVE-2021-36083

KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE...

CVE-2021-31510

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.4.55. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

PT-2021-14806 · Poweriso · Poweriso

Name of the Vulnerable Software and Affected Versions: PowerISO version 7.9 Description: A memory corruption issue exists in the DMG File Format Handler functionality. This can be triggered by a specially crafted DMG file, leading to an out-of-bounds write. An attacker can exploit this by providi...

PowerISO 缓冲区错误漏洞

PowerISO is a powerful CD/DVD/BD image file processing tool from PowerISO that can open, extract, burn, create, edit, compress, encrypt, split and convert ISO files, and mount ISO files using internal virtual drives. PowerISO suffers from a buffer overflow vulnerability that originates from a...

USN-4996-2: OpenEXR vulnerabilities

USN-4996-1 fixed several vulnerabilities in OpenEXR. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a...

USN-4996-1: OpenEXR vulnerabilities

It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code...

[SECURITY] Fedora 34 Update: libavif-0.9.0-2.fc34

This library aims to be a friendly, portable C implementation of the AV1 Im age File Format, as described here: https://aomediacodec.github.io/av1-avif/...

Updated jasper packages fix security vulnerabilities

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened CVE-2021-3443. A NULL pointer dereference fl...

CVE-2021-27390

A vulnerability has been identified in JT2Go All versions V13.1.0.3, Teamcenter Visualization All versions V13.1.0.3. The TIFFloader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out of bounds write past the end...