Fedora: Security Advisory for python2-pillow (FEDORA-2021-0ece308612)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the OpenJPEG library for image encoding and decoding, related to the lack of zero-division checking, allows attackers to trigger a service failure.

The vulnerability of the OpenJPEG library for image encoding and decoding is related to division by zero. Exploiting this vulnerability allows a remote attacker to cause a service failure...

Dan Bloomberg Leptonica 安全漏洞

Dan Bloomberg Leptonica is a Dan Bloomberg open source application. It provides basic image processing and image analysis operations. A security vulnerability exists in Leptonica before 1.80.0 that allows denial of service application crash...

Dan Bloomberg Leptonica 缓冲区错误漏洞

Leptonica is an open source library containing software widely used in image processing and image analysis applications. A heap buffer overflow vulnerability exists in findNextBorderPixel in ccbord.c in versions of Leptonica prior to 1.80.0. No details of the vulnerability are provided at this ti...

Adobe Photoshop has a binary vulnerability

Adobe Photoshop is an image-processing software developed and distributed by Adobe, and using its many editing and drawing tools, you can effectively perform tasks such as photo editing. Adobe Photoshop suffers from a binary vulnerability that can be exploited by attackers to cause a denial of...

Pillow Buffer Overflow Vulnerability (CNVD-2021-54036)

Pillow is a Python-based image processing library. Pillow is vulnerable to a buffer overflow vulnerability, which can be exploited by remote attackers to submit special file requests and trick users into parsing them, which can crash the application...

Pillow out-of-bounds read vulnerability (CNVD-2021-54037)

Pillow is a Python-based image processing library. Pillow is vulnerable to an out-of-bounds read vulnerability, which can be exploited to submit special file requests and trick users into parsing them, which can crash the application...

Pillow 输入验证错误漏洞

Python Imaging Library PIL is a free library for the Python programming language that supports opening, manipulating, and saving a wide range of image file formats.Pillow is a PIL branch. A denial of service vulnerability exists in Pillow versions prior to 8.1.1. The vulnerability stems from not...

ONLYOFFICE Document Server Buffer Overflow Vulnerability

ONLYOFFICE Document Server is a free collaborative online office suite that includes viewers and editors for text, spreadsheets and presentations. A buffer overflow vulnerability exists in the BMP image processing of the ONLYOFFICE Document Server core module, which can be exploited by an attacke...

MediaTek jpeg Buffer Overflow Vulnerability

MediaTek jpeg is an application chip from MediaTek China. It provides optimized image processing. MediaTek jpeg suffers from a buffer overflow vulnerability that originates from incorrect input validation and can be exploited by an attacker to write out-of-bounds...

Heap overflow

A heap buffer overflow vulnerability inside of BMP image processing was found at core module of ONLYOFFICE DocumentServer v4.0.0-9-v6.0.0. Using this vulnerability, an attacker is able to gain remote code executions on DocumentServer...

CVE-2021-25832

CVE-2021-25832 affects ONLYOFFICE DocumentServer. A heap buffer overflow in the BMP image processing of the core module (document server) can allow remote code execution on vulnerable versions: v4.0.0-9-v6.0.0. The provided documents do not include remediation steps or patch/version details beyon...

CVE-2021-25832

A heap buffer overflow vulnerability inside of BMP image processing was found at core module of ONLYOFFICE DocumentServer v4.0.0-9-v6.0.0. Using this vulnerability, an attacker is able to gain remote code executions on DocumentServer...

USN-4755-1: LibTIFF vulnerabilities

It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges...

ImageMagick Studio ImageMagick 数字错误漏洞

Imagemagick Studio ImageMagick is a suite of open source image processing software from the American company ImageMagick Studio. The software can read, convert or write images in a variety of formats. A de-zero vulnerability exists in coders/jp2.c in versions prior to ImageMagick 7.0.10-62. An...

OESA-2021-1007 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

The vulnerability of the Cisco Webex Teams collaboration software, related to errors in processing images of various symbols, allows a hacker to manipulate the names of files in the messaging interface.

The vulnerability of the Cisco Webex Teams collaboration software is related to errors in processing images of various symbols. Exploiting this vulnerability allows a malicious actor to remotely manipulate the names of files in the messaging interface...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust im crate through 2020-11-09, which stems from a limitation that TreeFocus does not have a send feature or a synchronization feature, resulting in a data contention...

Fedora: Security Advisory for python-pillow (FEDORA-2021-880aa7bd27)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: python-pillow-7.0.0-5.fc32

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt , devel developme...