SUSE CVE-2022-29978

There is a floating point exception error in sixelencoderdoresize, encoder.c:633 in libsixel img2sixel 1.8.6. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted JPEG file...

SUSE CVE-2022-38266

An issue in the Leptonica linked library v1.79.0 allows attackers to cause an arithmetic exception leading to a Denial of Service DoS via a crafted JPEG file...

The vulnerability of the jxl::FindExifTagPosition function in the JPEG XL codec, which allows a hacker to cause a service failure.

The vulnerability of the jxl::FindExifTagPosition function in the JPEG XL codec is related to the execution of operations outside of the buffer’s boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2023-35899 · Libraw · Libraw

Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to an index-out-of-bounds crash. Technical details about the crash include the involvement of specific functions: apply tiff, parse jpeg, and identify. Recommendations: ...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A buffer error vulnerability exists in PDF-XChange Editor that stems from problems parsing certain JPC files...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A security vulnerability exists in PDF-XChange Editor that originates from a problem with the parsing of certain JP2 files...

PDF-XChange Editor 缓冲区错误漏洞

Tracker Software PDF-XChange Editor is a suite of software for viewing and editing PDF format files from Tracker Software, a Canadian company. A buffer error vulnerability exists in PDF-XChange Editor that stems from problems parsing certain JP2 files...

GSD-2023-1001023 media: imx-jpeg: Disable useless interrupt to avoid kernel panic

media: imx-jpeg: Disable useless interrupt to avoid kernel panic This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000597 media: imx-jpeg: Disable useless interrupt to avoid kernel panic

media: imx-jpeg: Disable useless interrupt to avoid kernel panic This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

[SECURITY] Fedora 37 Update: jpegoptim-1.5.1-1.fc37

Jpegoptim is an utility to optimize JPEG files. Provides lossless optimization based on optimizing the Huffman tables and "lossy" optimization based on setting maximum quality factor...

CVE-2022-32649

In jpeg, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07225840; Issue ID: ALPS07225840...

CVE-2022-32649

In jpeg, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07225840; Issue ID: ALPS07225840...

Design/Logic Flaw

In jpeg, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07225840; Issue ID: ALPS07225840...

CVE-2022-32649

CVE-2022-32649 describes a local use-after-free in the jpeg component caused by a logic error, enabling local privilege escalation to SYSTEM with no user interaction. Affected software is described only as jpeg (no vendor/product version details provided in the documents). The vulnerability’s imp...

MediaTek 安全漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from a logic error in jpegs that may be reused after release, which could lead to a local privilege escalation that requires system execution...

CVE-2022-32649

In jpeg, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07225840; Issue ID: ALPS07225840...

CVE-2022-32649

In jpeg, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07225840; Issue ID: ALPS07225840...

PT-2023-13103 · Jpeg · Jpeg

Name of the Vulnerable Software and Affected Versions: jpeg affected versions not specified Description: The issue is related to a logic error that leads to a possible use after free in jpeg. This could result in local escalation of privilege, with System execution privileges required for...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2022-2865)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2022-2883)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...