AZL-60091 CVE-2024-4467 affecting package qemu for versions less than 6.2.0-24

A flaw was found in the QEMU disk image utility qemu-img 'info' command. A specially crafted image file containing a json: value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, leading to denial of service or read/write ...

PT-2024-6080

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A flaw was found in the QEMU disk image utility qemu-img 'info' command. A specially crafted image file containing a json: value describing block devices in QMP could cause the qemu-img process ...

CVE-2024-28390

An issue in Advanced Plugins ultimateimagetool module for PrestaShop before v.2.2.01, allows a remote attacker to escalate privileges and obtain sensitive information via Improper Access Control...

UBI Reader 路径遍历漏洞

UBI Reader is a collection of Python modules and scripts from Jason Pruitt's personal developer. It is capable of extracting the contents of UBI and UBIFS images and analyzing them to determine the parameter settings to recreate them using the mtd-utils tool. A security vulnerability exists in UB...

exiftool 操作系统命令注入漏洞

exiftool is a software application. Make metadata more accessible. An operating system command injection vulnerability exists in exiftool before 12.38, which stems from the lib/Image/ExifTool.pm error handling $file = /|$/ check...

exiv2: Out-of-bounds read in Exiv2::Jp2Image::printStructure

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4 and earlier. The out-of-bounds read is triggered when Exiv2 is used to print the metadata of a crafted image file. A...

exif 代码问题漏洞

Exif is a small command line utility to display EXIF information hidden in JPEG files. A null pointer dereference vulnerability exists in the "actions.c" file in Exif 0.6.22 and earlier. An attacker can exploit this vulnerability by uploading a malicious JPEG file that will crash the application...

UBUNTU-CVE-2019-3574

In libsixel v1.8.2, there is a heap-based buffer over-read in the function loadjpeg in the file loader.c, as demonstrated by img2sixel...

Dotcms cross-site scripting vulnerability (CNVD-2018-26792)

dotCMS is a content management system CMS from the United States dotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A cross-site scripting vulnerability exists in dotCMS 5.0.3 and earlier versions. A remote attacker can leverage t...

vdsm: calls to qemu-img are not protected by prlimit/ulimit

It was found that vdsm would invoke qemu-img on untrusted inputs without limiting resources. By uploading a specially crafted image, an attacker could cause the qemu-img process to consume unbounded amounts of memory of CPU time, causing a denial of service condition that could potentially impact...

xv Code Execution Vulnerability

xv is an image processing tool for X Windows systems. A security vulnerability exists in the xvpng.c file in xv version 3.10a, which stems from the program not using the correct length value. An attacker could exploit this vulnerability to corrupt memory, cause a denial of service or possibly...