CVE-2019-1010174

CVE-2019-1010174 Bibliothèque CImg v.2.3.3 - injection de commandes CVE-2019-1010174 Détail Modifié Cette vulnérabilité a été modifiée depuis sa dernière analyse par le NVD. Elle est en attente d'une nouvelle analyse qui peut entraîner d'autres modifications des informations fournies. Description...

cve-2022-39197

cve-2022-39197 Actuellement, seules les images distantes peuvent être chargées...

S5Late

S5Late Эксплойт для tethered iPod bootrom/DFU. В настоящее время поддерживается только Nano 7G; для поддержки Nano 6G необходимо обновить офсеты. Запуск Переведите ваш iPod в режим DFU. Затем выполните: ./S5Late hax 2024-12-15T23:11:34Z INFO S5Late We found an Apple Device in DFU mode...

CVE-2024-7344

🐞 CVE-2024-7344: Некорректная загрузка PE-образов Этот репозиторий содержит исследовательские материалы, связанные с CVE-2024-7344 — уязвимостью обхода Secure Boot, затрагивающей системы UEFI. Здесь собраны технический анализ уязвимости, документация по сценарию атаки и воссозданные приложения,...

CVE-2026-33626-Lab

CVE-2026-33626 — Лаборатория SSRF для Vision-Language в LMDeploy Обзор Этот репозиторий воспроизводит CVE-2026-33626 – уязвимость подделки серверных запросов SSRF в пути загрузки изображений для vision-language в LMDeploy. Уязвимое поведение возникает, когда LMDeploy получает URL изображения, а...

CVE-2026-58773

In linkloadgnssimage of linkdevice.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

[SECURITY] Fedora 45 Update: gdk-pixbuf2-2.44.8-3.fc45

gdk-pixbuf is an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter...

[SECURITY] Fedora 43 Update: gdk-pixbuf2-2.44.6^really2.44.4-3.fc43

gdk-pixbuf is an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter...

[SECURITY] Fedora 44 Update: gdk-pixbuf2-2.44.6^really2.44.4-3.fc44

gdk-pixbuf is an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter...

PUB-A-503549684

In linkloadgnssimage of linkdevice.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

[SECURITY] Fedora 44 Update: gdk-pixbuf2-2.44.6^really2.44.4-2.fc44

gdk-pixbuf is an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter...

Fedora 43 : emacs (2026-8894da1406)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8894da1406 advisory. Fix CVE-2026-77219: Integer overflow in PBM/PPM/PGM image loader. Tenable has extracted the preceding description block directly from the Fedora security...

CVE-2026-18444

There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI...

EUVD-2026-52804

NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-47612

Summary: NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory, potentially leading to information disclosure. The CVSSv3.1 base score is 7.5 (High) with network attack vector and no ...

CVE-2026-47612

NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-47612

NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-47612

NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-47612: Improper Limitation of a Pathname to a Restricted Directory

NVIDIA Dynamo for Linux contains a vulnerability in the image loading component where an attacker may cause improper limitation of a pathname to a restricted directory. A successful exploit of this vulnerability might lead to information disclosure...

Important: python-pillow

Issue Overview: Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride smaller than the natural row width, causing pixel access such as...