Lucene search
K

6 matches found

OSV
OSV
added 2025/04/09 12:57 p.m.7 views

GHSA-Q7RW-W4CQ-2J6W bep/imagemeta allows excessively large EXIF data structures

Impact The EXIF data format allows for defining excessively large data structures in relatively small payloads. Before v0.10.0, If you didn't trust the input images, this could be abused to construct denial-of-service attacks. Patches v0.10.0 added LimitNumTags default 5000 and LimitTagSize defau...

6.9CVSS6.3AI score0.0022EPSS
Exploits0References4
Veracode
Veracode
added 2020/02/28 1:43 a.m.31 views

Heap-based Buffer Overflow

libgd.so is vulnerable to heap-based buffer overflows. The overflows can be triggered when the function gdImageTiffPtr of gdtiff.c reads input images of GD and GD2 formats and does not check the transparent index bounds of the palette. Note: this CVE is disputed because the vendor suggested GD an...

8.1CVSS3.3AI score0.00422EPSS
Exploits1References1Affected Software2
Prion
Prion
added 2018/08/01 4:29 p.m.18 views

Null pointer dereference

A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image...

4.3CVSS6.8AI score0.01771EPSS
Exploits1References7Affected Software2
OSV
OSV
added 2018/08/01 4:29 p.m.1 views

DEBIAN-CVE-2016-9572

A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image...

6.5CVSS6.8AI score0.01771EPSS
Exploits1References1
NVD
NVD
added 2018/08/01 4:29 p.m.15 views

CVE-2016-9572

A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image...

6.5CVSS6.9AI score0.01771EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2016/12/08 9:17 a.m.25 views

CVE-2016-9572

A NULL pointer dereference flaw was found in the way openjpeg 2.1.2 decoded certain input images. Due to a logic error in the code responsible for decoding the input image, an application using openjpeg to process image data could crash when processing a crafted image...

6.5CVSS2.3AI score0.01771EPSS
Exploits1References1
Rows per page
Query Builder