Lucene search
+L

574 matches found

CNNVD
CNNVD
•added 2024/04/15 12:00 a.m.•18 views

ImageSharp security vulnerabilities

ImageSharp is a new, full-featured, fully managed, cross-platform 2D graphics API from ImageSharp. ImageSharp suffers from a denial of service vulnerability that stems from the fact that processing specially crafted files may cause the image decoder to use too much memory, which can be exploited ...

6.5CVSS6.7AI score0.00629EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/04/15 12:00 a.m.•29 views

PT-2024-24370 · Unknown · Imagesharp

Name of the Vulnerable Software and Affected Versions: ImageSharp versions prior to 2.1.8 ImageSharp versions prior to 3.1.4 Description: A vulnerability discovered in the ImageSharp library can lead to excessive memory usage in image decoders when processing specially crafted files. This flaw ca...

6.5CVSS7AI score0.00629EPSS
SaveExploits0References13
osv_debian
osv_debian
•added 2024/03/20 6:15 a.m.•19 views

DEBIAN-CVE-2024-28574

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to cause a denial of service DoS via the opjj2kcopydefaulttcpandcreatetcd function when reading images in J2K format...

6.2CVSS5.2AI score0.00287EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/11/16 12:00 a.m.•2 views

PT-2023-32978

Name of the Vulnerable Software and Affected Versions sharp versions prior to 0.32.6 Description The issue affects sharp, which uses libwebp to decode WebP images. Almost anyone processing untrusted input with versions of sharp prior to 0.32.6 is affected. Recommendations For sharp versions prior...

7.8CVSS5.8AI score
SaveExploits0References4
Veracode
Veracode
•added 2023/09/05 2:42 a.m.•31 views

Out-Of-Bound Write

libfreerdp.so is vulnerable to Out-Of-Bound Write. The vulnerability exists due to an integer overflow in the freerdpimagecopy function of color.c when an image width or height == 0, which allows an attacker to cause out-of-bound write when image decoding is done by a proxy...

9.8CVSS7AI score0.01357EPSS
SaveExploits1References9Affected Software1
AlpineLinux
AlpineLinux
•added 2023/08/31 10:15 p.m.•50 views

CVE-2023-40186

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the gdiCreateSurface function. This issue affects FreeRDP based clients only. FreeRDP proxies...

9.8CVSS7.1AI score0.01357EPSS
SaveExploits1
Prion
Prion
•added 2023/08/31 10:15 p.m.•34 views

Design/Logic Flaw

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the gdiCreateSurface function. This issue affects FreeRDP based clients only. FreeRDP proxies...

7.5CVSS9.2AI score0.01357EPSS
SaveExploits1References7Affected Software3
osv_cve
osv_cve
•added 2023/08/31 9:13 p.m.•47 views

CVE-2023-40186 IntegerOverflow leading to Out-Of-Bound Write Vulnerability in FreeRDP

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the gdiCreateSurface function. This issue affects FreeRDP based clients only. FreeRDP proxies...

6.5CVSS7.7AI score
SaveExploits0References10
Cvelist
Cvelist
•added 2023/08/31 9:13 p.m.•63 views

CVE-2023-40186 IntegerOverflow leading to Out-Of-Bound Write Vulnerability in FreeRDP

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the gdiCreateSurface function. This issue affects FreeRDP based clients only. FreeRDP proxies...

6.5CVSS9.6AI score0.01357EPSS
SaveExploits1References7
SUSE CVE
SUSE CVE
•added 2023/08/05 2:01 a.m.•14 views

SUSE CVE-2023-29407

A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size width height appearing to be zero...

6.5CVSS9.1AI score0.00874EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2023/08/02 8:15 p.m.•13 views

DEBIAN-CVE-2023-29407

A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size width height appearing to be zero...

6.5CVSS6.8AI score0.00874EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2023/08/02 8:15 p.m.•20 views

UBUNTU-CVE-2023-29407

A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size width height appearing to be zero...

6.5CVSS5.8AI score0.00874EPSS
SaveExploits0References5
Mend
Mend
•added 2023/08/02 7:52 p.m.•6 views

CVE-2023-29407

A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size width height appearing to be zero...

7.1CVSS0.00874EPSS
SaveExploits0References15
Vulnrichment
Vulnrichment
•added 2023/08/02 7:52 p.m.•25 views

CVE-2023-29407 Excessive CPU consumption when decoding 0-height images in golang.org/x/image/tiff

A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size width height appearing to be zero...

6.6AI score0.00874EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/02 12:00 a.m.•6 views

CVE-2023-29407: Excessive Iteration

A maliciously-crafted image can cause excessive CPU consumption in decoding. A tiled image with a height of 0 and a very large width can cause excessive CPU consumption, despite the image size width height appearing to be zero...

6.5CVSS6.7AI score0.00874EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/08/02 12:00 a.m.•16 views

PT-2023-6960 · Golang +2 · Golang +2

Name of the Vulnerable Software and Affected Versions: Golang affected versions not specified Description: The issue is related to excessive CPU consumption during decoding. A maliciously-crafted image, specifically a tiled image with a height of 0 and a very large width, can cause this excessive...

7.8CVSS5.8AI score0.00933EPSS
SaveExploits0References23
osv_cve
osv_cve
•added 2023/07/06 1:15 p.m.•18 views

CVE-2022-48512

Use After Free UAF vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perform abnormally...

9.8CVSS5.8AI score0.00487EPSS
SaveExploits0References2
NVD
NVD
•added 2023/07/06 1:15 p.m.•44 views

CVE-2022-48512

Use After Free UAF vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perform abnormally...

9.8CVSS9.4AI score0.00487EPSS
SaveExploits0References2
Prion
Prion
•added 2023/07/06 1:15 p.m.•31 views

Design/Logic Flaw

Use After Free UAF vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perform abnormally...

7.5CVSS9.3AI score0.00487EPSS
SaveExploits0References2Affected Software2
Vulnrichment
Vulnrichment
•added 2023/07/06 12:22 p.m.•17 views

CVE-2022-48512

Use After Free UAF vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perform abnormally...

7.1AI score0.00487EPSS
SaveExploits0References2
Rows per page
Query Builder