Lucene search
K

2241 matches found

Fedora
Fedora
added 2021/01/21 1:47 a.m.68 views

[SECURITY] Fedora 33 Update: python-pillow-7.2.0-3.fc33

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt , devel developme...

8.8CVSS1.4AI score0.01789EPSS
Exploits0
OpenVAS
OpenVAS
added 2021/01/21 12:0 a.m.28 views

Fedora: Security Advisory for python-pillow (FEDORA-2021-a8ddc1ce70)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.3AI score
Exploits0References2
CNVD
CNVD
added 2021/01/14 12:0 a.m.21 views

Pillow Buffer Overflow Vulnerability (CNVD-2021-54038)

Pillow is a Python-based image processing library. buffer overflow vulnerability exists in versions of Pillow prior to 8.1.0, which can be exploited by attackers to cause a buffer over read...

7.1CVSS5.5AI score0.01498EPSS
Exploits0References1
CNVD
CNVD
added 2020/12/24 12:0 a.m.3 views

Magical Image Converter and Processor (Windows Edition) Denial of Service Vulnerability

Magic Image Processing Software is a professional, easy-to-use and efficient image processing software toolset developed by Beijing Magic Pixel Technology Co. A denial of service vulnerability exists in Miracle Image Converter windows version, which can be exploited by attackers to cause a softwa...

6.9AI score
Exploits0
CNVD
CNVD
added 2020/12/23 12:0 a.m.7 views

ImageMagick Input Validation Error Vulnerability (CNVD-2021-11327)

ImageMagick is a suite of open source image processing software. The software can read, convert or write images in a variety of formats. ImageMagick suffers from a security vulnerability, which stems from IntensityCompare of /magick/quantize.c, where a call to PixelPacketIntensity returns an...

4.3CVSS7.5AI score0.01124EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:0 a.m.2 views

The vulnerability of the PCX P library for image processing in Pillow allows a hacker to trigger a service failure.

The vulnerability of the PCX P library for image processing in Pillow relates to the issue of the operation exceeding the buffer boundaries in memory during the encoding of PCX images. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

9.8CVSS6.7AI score0.0369EPSS
Exploits0References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:0 a.m.2 views

The vulnerability of the realloc function in the Pillow image processing library allows a malicious actor to cause a service failure.

The vulnerability of the realloc function in the Pillow image processing library libImaging/TiffDecode.c is due to a numerical overflow during the processing of TIFF images. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

9.3CVSS6.5AI score0.01975EPSS
Exploits0References6Affected Software3
Apple
Apple
added 2020/12/15 6:2 a.m.68 views

About the security content of iCloud for Windows 11.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.8CVSS0.7AI score0.05716EPSS
Exploits9Affected Software1
CNVD
CNVD
added 2020/12/15 12:0 a.m.5 views

Imagemagick Studio ImageMagick Resource Management Error Vulnerability (CNVD-2021-25968)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A resource management error vulnerability exists in versions of ImageMagick prior to...

5.5CVSS7AI score0.01101EPSS
Exploits1References1
CNVD
CNVD
added 2020/12/15 12:0 a.m.6 views

ImageMagick Code Issue Vulnerability

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in versions prior to ImageMagick 7.0.8-68, which stem...

5.5CVSS5.9AI score0.01016EPSS
Exploits1References1
CNVD
CNVD
added 2020/12/15 12:0 a.m.9 views

Imagemagick Studio ImageMagick Input Validation Error Vulnerability (CNVD-2021-23801)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in versions of ImageMagick prior to 7.0.9-0, which...

5.5CVSS6.4AI score0.00833EPSS
Exploits1References1
RedHat Linux
RedHat Linux
added 2020/12/14 1:36 p.m.2 views

libexif: out of bounds write due to an integer overflow in exif-entry.c

A flaw was found in libexif. A possible out of bounds write, due ot an integer overflow, could lead to a remote code execution if a third party app used this library to process remote image data. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

9.8CVSS7.9AI score0.03189EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2020/12/14 11:50 a.m.2 views

libexif: out of bounds write due to an integer overflow in exif-entry.c

A flaw was found in libexif. A possible out of bounds write, due ot an integer overflow, could lead to a remote code execution if a third party app used this library to process remote image data. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

9.8CVSS7.9AI score0.03189EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2020/12/14 11:36 a.m.4 views

libexif: out of bounds write due to an integer overflow in exif-entry.c

A flaw was found in libexif. A possible out of bounds write, due ot an integer overflow, could lead to a remote code execution if a third party app used this library to process remote image data. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

9.8CVSS7.9AI score0.03189EPSS
Exploits0References4
Apple
Apple
added 2020/12/14 12:0 a.m.103 views

About the security content of tvOS 14.3

About the security content of tvOS 14.3 This document describes the security content of tvOS 14.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

8.8CVSS9.6AI score0.01705EPSS
Exploits0References1Affected Software1
Fedora
Fedora
added 2020/12/09 1:23 a.m.22 views

[SECURITY] Fedora 32 Update: vips-8.8.4-5.fc32

VIPS is an image processing library. It is good for very large images even larger than the amount of RAM in your machine, and for working with color. This package should be installed if you want to use a program compiled against VIPS...

5.3CVSS2.6AI score0.0198EPSS
Exploits1
OpenVAS
OpenVAS
added 2020/12/09 12:0 a.m.17 views

Fedora: Security Advisory for vips (FEDORA-2020-d82261f7b1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.3CVSS6.1AI score0.0198EPSS
Exploits1References2
OSV
OSV
added 2020/12/08 9:15 p.m.3 views

CVE-2020-27912

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. Processing a maliciously crafted image may lead to arbitrary code execution...

7.8CVSS7.3AI score
Exploits0References9
NVD
NVD
added 2020/12/08 9:15 p.m.17 views

CVE-2020-27912

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. Processing a maliciously crafted image may lead to arbitrary code execution...

9.3CVSS7.4AI score0.01764EPSS
Exploits0References9
Cvelist
Cvelist
added 2020/12/08 8:10 p.m.20 views

CVE-2020-27912

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. Processing a maliciously crafted image may lead to arbitrary code execution...

8AI score0.01764EPSS
Exploits0References9
Rows per page
Query Builder