Lucene search
K

2235 matches found

Prion
Prion
added 2022/10/07 6:15 p.m.12 views

Code injection

A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code...

4.4CVSS7.7AI score0.00116EPSS
Exploits0References1Affected Software19
Positive Technologies
Positive Technologies
added 2022/10/07 12:0 a.m.4 views

PT-2022-11197 · Autodesk · Autodesk

Name of the Vulnerable Software and Affected Versions: Autodesk affected versions not specified Description: A Memory Corruption issue may lead to code execution through maliciously crafted DLL files, specifically affecting the Autodesk Image Processing component. Recommendations: At the moment,...

7.8CVSS7.8AI score0.00116EPSS
Exploits0References2
CVE
CVE
added 2022/10/07 12:0 a.m.78 views

CVE-2021-40166

CVE-2021-40166 affects Autodesk Image Processing: parsing of a malicious PNG can trigger a use-after-free by freeing an object that has already been freed, potentially allowing arbitrary code execution. Documented impact is arbitrary code execution; no specific remediation/version fixes are state...

7.8CVSS7.8AI score0.00116EPSS
Exploits0References1Affected Software19
CNNVD
CNNVD
added 2022/10/07 12:0 a.m.3 views

Autodesk Image Processing 缓冲区错误漏洞

Autodesk Image Processing is an image processing software from Autodesk, Inc. A security vulnerability exists in Autodesk Image Processing that originates from a memory corruption in the Autodesk Image Processing component, which can be exploited by an attacker to execute code via a maliciously...

7.8CVSS7.6AI score0.00116EPSS
Exploits0References2
CVE
CVE
added 2022/10/07 12:0 a.m.93 views

CVE-2021-40163

CVE-2021-40163 is a memory corruption vulnerability in Autodesk Image Processing component that can lead to code execution via a malicious DLL. The NVD entry notes local attack vector, user interaction required, with a base score of 7.8 (HIGH). The issue is repeatedly described across sources as ...

7.8CVSS7.8AI score0.00116EPSS
Exploits0References1Affected Software19
CNNVD
CNNVD
added 2022/10/07 12:0 a.m.2 views

Autodesk Image Processing 缓冲区错误漏洞

Autodesk Image Processing is an image processing software from the US-based Autodesk Corporation. A security vulnerability exists in Autodesk Image Processing that originates from a possible heap-based buffer overflow when parsing TIFF, PICT, TGA, or RLC files, which can be exploited by an attack...

7.8CVSS8AI score0.00121EPSS
Exploits0References2
CVE
CVE
added 2022/10/07 12:0 a.m.76 views

CVE-2021-40162

CVE-2021-40162 affects Autodesk Image Processing: a vulnerability where parsing TIFF/PICT/TGA/RLC files may cause reads beyond allocated boundaries, enabling arbitrary code execution. Root cause is in the image-processing component's handling of external image formats. Impact is high (AV Local, U...

7.8CVSS7.7AI score0.00116EPSS
Exploits0References1Affected Software19
CNNVD
CNNVD
added 2022/10/07 12:0 a.m.2 views

Autodesk Image Processing 缓冲区错误漏洞

Autodesk Image Processing is an image processing software from the US company Autodesk. A security vulnerability exists in Autodesk Image Processing, which can be exploited by an attacker to execute arbitrary code when the Autodesk Image Processing component writes out of an allocated buffer when...

7.8CVSS8.1AI score0.00116EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/10/07 12:0 a.m.2 views

Autodesk Image Processing 缓冲区错误漏洞

Autodesk Image Processing is an image processing software from Autodesk, Inc. A security vulnerability exists in Autodesk Image Processing, which originates when parsing TIFF, PICT, TGA, or RLC files, the Autodesk Image Processing component may be forced to read outside of allocated boundaries,...

7.8CVSS7.7AI score0.00116EPSS
Exploits0References2
CVE
CVE
added 2022/10/07 12:0 a.m.65 views

CVE-2021-40165

Summary: CVE-2021-40165 affects Autodesk Image Processing components. A crafted TIFF/PICT/TGA/RLC file can cause a write past the allocated buffer during parsing, potentially allowing arbitrary code execution. The CVSSv3.1 base score is 7.8 (HIGH) with LOCAL attack vector, low attack complexity, ...

7.8CVSS7.9AI score0.00116EPSS
Exploits0References1Affected Software19
Cvelist
Cvelist
added 2022/10/07 12:0 a.m.23 views

CVE-2021-40163

A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component...

8.1AI score0.00116EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/10/07 12:0 a.m.13 views

CVE-2021-40166

A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by attackers to execute arbitrary code...

8.1AI score0.00116EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/10/07 12:0 a.m.5 views

Autodesk Image Processing 资源管理错误漏洞

Autodesk Image Processing is an image processing software from the US-based Autodesk Corporation. A security vulnerability exists in Autodesk Image Processing, which originates from a maliciously crafted PNG file in an Autodesk Image Processing component that could be used to attempt to free...

7.8CVSS7.8AI score0.00116EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/10/07 12:0 a.m.20 views

CVE-2021-40165

A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code...

8.1AI score0.00116EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/10/03 12:0 a.m.2 views

The vulnerability of the `cv::PxMDecoder::readData` function in the `grfmt_pxm.cpp` component of the OpenCV library, which is used for computer vision, image processing, and numerical algorithms of general purpose, open-source computer vision. This vulnerability allows a attacker to cause a service denial.

The vulnerability of the cv::PxMDecoder::readData function in the grfmtpxm.cpp component of the Computer Vision, Image Processing, and Numerical Algorithms General Purpose Library OpenSource Computer Vision Library – OpenCV is related to the execution of operations outside of the buffer in memory...

7.1CVSS6.7AI score0.01536EPSS
Exploits0References7Affected Software3
NVD
NVD
added 2022/09/23 7:15 p.m.22 views

CVE-2022-32841

The issue was addressed with improved memory handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. Processing a maliciously crafted image may result in disclosure of process memory...

5.5CVSS0.00253EPSS
Exploits0References4
OSV
OSV
added 2022/09/23 7:15 p.m.2 views

CVE-2022-32785

A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing an image may lead to a denial-of-service...

5.5CVSS6.8AI score0.00075EPSS
Exploits0References4
NVD
NVD
added 2022/09/23 7:15 p.m.14 views

CVE-2022-32785

A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing an image may lead to a denial-of-service...

5.5CVSS0.00075EPSS
Exploits0References4
Prion
Prion
added 2022/09/23 7:15 p.m.27 views

Null pointer dereference

A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing an image may lead to a denial-of-service...

1.9CVSS5.9AI score0.00075EPSS
Exploits0References4Affected Software4
Vulnrichment
Vulnrichment
added 2022/09/23 6:59 p.m.5 views

CVE-2022-32841

The issue was addressed with improved memory handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. Processing a maliciously crafted image may result in disclosure of process memory...

4.5AI score0.00253EPSS
Exploits0References4
Rows per page
Query Builder