SUSE-SU-2025:03219-1 Security update for jasper

This update for jasper fixes the following issues: - CVE-2025-8835: missing range check in the JPEG-2000 JPC Encoder leads to assertion failure and crash when processing a malformed JPEG2000 image with an invalid cblkwidth parameter bsc1247904. - CVE-2025-8836: out-of-bounds array indexing in...

CVE-2022-50182 media: imx-jpeg: Align upwards buffer size

In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Align upwards buffer size The hardware can support any image size WxH, with arbitrary W image width and H image height dimensions. Align upwards buffer size for both encoder and decoder. and leave the picture...

CVE-2024-38406

Memory corruption while handling IOCTL calls in JPEG Encoder driver...

CVE-2024-38407

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver...

CVE-2024-38407

CVE-2024-38407 describes a memory corruption vulnerability in the JPEG Encoder driver triggered by processing input parameters for any IOCTL call. The issue is local in scope with high impact to confidentiality, integrity, and availability per CVSS metrics (AV:L, AC:H/L, PR:L, UI:N, S:U, C/H/I/H/...

CVE-2024-38407 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while processing input parameters for any IOCTL call in the JPEG Encoder driver...

CVE-2024-38406 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while handling IOCTL calls in JPEG Encoder driver...

CVE-2024-38406 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera

Memory corruption while handling IOCTL calls in JPEG Encoder driver...

CVE-2024-38406

CVE-2024-38406 affects Qualcomm chipsets and is described as memory corruption when handling IOCTL calls in the JPEG Encoder driver. The NVD entry lists local access with high impact to confidentiality, integrity, and availability, with exploitation status not provided. Other connected records re...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when processing the input parameters of any IOCTL call in the JPEG Encoder driver...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption when processing IOCTL calls in the JPEG Encoder driver...

PT-2024-27986 · Unknown · Jpeg Encoder Driver

Name of the Vulnerable Software and Affected Versions: JPEG Encoder driver affected versions not specified Description: The issue is related to memory corruption that occurs while processing input parameters for any IOCTL call in the JPEG Encoder driver. This problem can lead to memory corruption...

PT-2024-40590 · Git +1 · Libultrahdr

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the format message function, which is called by...

The vulnerability of the JpegEncoder::Encode function in the file format decoders and encoders of the libheif library allows a attacker to cause a service failure.

The vulnerability of the JpegEncoder::Encode function in file format decoders and encoders of the libheif library is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause service interruptions...

DEBIAN-CVE-2024-25269

libheif = 1.17.6 contains a memory leak in the function JpegEncoder::Encode. This flaw allows an attacker to cause a denial of service attack...

UBUNTU-CVE-2024-25269

libheif = 1.17.6 contains a memory leak in the function JpegEncoder::Encode. This flaw allows an attacker to cause a denial of service attack...

libheif Security Vulnerabilities

libheif is an ISO/IEC 23008-12:2017 HEIF file format decoder and encoder. A security vulnerability exists in libheif 1.17.6 and earlier versions, which stems from a memory leak vulnerability in the function JpegEncoder::Encode. An attacker can exploit the vulnerability to cause a denial of servic...

PT-2024-3055

Name of the Vulnerable Software and Affected Versions libheif versions prior to 1.17.7 Description The issue is related to a memory leak in the JpegEncoder::Encode function, which can be exploited by an attacker to cause a denial of service attack. This flaw allows a remote attacker to disrupt...

SUSE CVE-2010-0846

Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the Marc...

ffjpeg 安全漏洞

ffjpeg is a JPEG encoder/decoder by the individual developer Kai Chen in China. A security vulnerability exists in ffjpeg, which originates from a memory leak contained in the /src/jfif.c file...