Debian DLA-2612-1 : leptonlib security update

Several issues have been found by ClusterFuzz in leptonlib, an image processing library. All issues are related to heap-based buffer over-read in several functions or a denial of service application crash with crafted data. For Debian 9 stretch, these problems have been fixed in version...

Pillow Buffer Overflow Vulnerability (CNVD-2021-54033)

Pillow is a Python-based image processing library. buffer overflow vulnerability exists in versions of Pillow prior to 8.1.1, which stems from the presence of a negative offset memcpy with an invalid size in TiffDecode.c. No details of the vulnerability are currently available...

Leptonica heap buffer overflow vulnerability (CNVD-2021-19745)

Leptonica is an open source library containing software widely used in image processing and image analysis applications. A heap buffer overflow vulnerability exists in findNextBorderPixel in ccbord.c in versions of Leptonica prior to 1.80.0. No details of the vulnerability are provided at this ti...

Fedora: Security Advisory for python2-pillow (FEDORA-2021-0ece308612)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

UBUNTU-CVE-2020-17507

An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. readxbmbody in gui/image/qxbmhandler.cpp has a buffer over-read...

Pillow Out-of-Bounds Read Vulnerability (CNVD-2021-21942)

Pillow is a Python based image processing library. An out-of-bounds read vulnerability exists in the libImaging/PcxDecode.c file in Pillow versions prior to 7.1.0. No details of the vulnerability are provided at this time...

exiv2: heap-based buffer overflow in Exiv2::ul2Data in types.cpp

Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...

The vulnerability of the unpacked_load_raw() function in the LibRaw image processing library allows a attacker to cause a service failure.

The vulnerability of the unpackedloadraw function in dcrawcommon.cpp in the LibRaw image processing library is related to type conversion errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Fedora: Security Advisory for python-pillow (FEDORA-2020-5cdbb19cca)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the LibRaw::kodak_ycbcr_load_raw function in the LibRaw image processing library, which is related to buffer overflow attacks, allows attackers to cause a service failure.

The vulnerability of the LibRaw::kodakycbcrloadraw function in the image processing library LibRaw is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a service failure...

USN-3693-1 jasper vulnerabilities

It was discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user or automated system using JasPer were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of th...

UBUNTU-CVE-2018-10804

ImageMagick version 7.0.7-28 contains a memory leak in WriteTIFFImage in coders/tiff.c...

[SECURITY] [DLA 1302-1] leptonlib security update

Package : leptonlib Version : 1.69-3.1+deb7u2 CVE ID : CVE-2018-7186 CVE-2018-7440 Debian Bug : 890548 891932 Different flaws have been found in leptonlib, an image processing library. CVE-2018-7186 Leptonica did not limit the number of characters in a %s format argument to fscanf or sscanf, that...

Cimg heap buffer out-of-bounds read vulnerability (CNVD-2018-05449)

CImg is an open source C++ tool library for image processing . A heap buffer out-of-bounds read vulnerability exists in the 'loadbmp' function of the CImg.h file in CImg version 220. No detailed vulnerability details are provided at this time...

Cimg 'load_bmp' function heap buffer out-of-bounds read vulnerability (CNVD-2018-05451)

CImg is an open source C++ tool library for image processing . A heap buffer out-of-bounds read vulnerability exists in the 'loadbmp' function of the CImg.h file in CImg version 220. No detailed vulnerability details are provided at this time...

UBUNTU-CVE-2017-15277

ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data...

UBUNTU-CVE-2017-9141

In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the ResetImageProfileIterator function in MagickCore/profile.c because of missing checks in the ReadDDSImage function in coders/dds.c...

Microsoft Windows 'libjpeg' Information Disclosure Vulnerability (KB4014794)

This host is missing an important security update according to Microsoft KB4014794. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

ImageWorsener 'iwgif_record_pixel()' function remote heap buffer overflow vulnerability

ImageWorsener is a cross-platform command line utility and library for image scaling and other image processing. It has full support for PNG, JPEG, and BMP formats, experimental support for WebP, read-only support for GIF, and limited support for some other image formats. A remote heap buffer...

PHP LibGD Stack Buffer Overflow Vulnerability

libGD is an open source library for dynamically creating images , it supports the creation of charts, graphs and thumbnails and so on. PHP LibGD suffers from a stack buffer overflow vulnerability that allows remote attackers to submit special requests and conduct denial of service attacks...